Someone changed my profile picture?

[General_Torpedo]

So some days ago I logged in to steam to encounter that my pfp was a QR with Chinese (I think) letters on it.

I also saw that apparently I had send friend request to some rather suspicious accounts (One with a Chinese name, 4 others with just random numbers), as well as having sell almost all of my inventory stuff I had (I didn't had much really, didn't even made one dollar), also, I gave at least two community badges to some who I don't remember the name of, but I am pretty sure that it was a pretty suspicious account.
I already scanned for malware with malwarebytes both my laptop and phone, I've changed my Passwords of both my steam and mail, and deauthorized all other devices.
What else can I do?
Other than that, nothing else has happened as of now, I changed back my pfp and that is pretty much all.

[Wolf Knight]

your account is compromised
DO NOT TRADE
If you have access to the account

Steps to take NOW to secure the account:
1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)
6. If points were stolen, do a password RESET to cancel the awards/points before they are delivered

Please review how you are logging into Steam, you somehow gave them your log in information. This could of been due to the computer being compromised and redirecting to a fake login, or you using a 3rd party site to login to steam.

Once you are sure you have regained control, you can start trading again. Please triple check any trades you make to be sure they are going to the correct account.

After you have secured the account, please edit your profile back to normal (if it was altered by the hijacker/scammer)

Steam support does not post messages on your profile, they don't give out warnings about pending bans, they dont give time to move stuff, they wont tell you to move stuff. Someone has enough access to the account to make changes to the profile. If you try to move any items, the trade will get cancelled and a new one created sending the items to the scammers accounts.

They do not change your name/avatar unless it violates the rules (advertising, inappropriate language,etc). Such a change would only reset it to the default settings (your steam ID for the name, the default ? avatar for the avatar). This would include an account alert that you have to click a box that says "I have read this"

[cSg|mc-Hotsauce]

Definite hijacked account. Do not scan the QR code.

And please remove the link.

[General_Torpedo]

Originally posted by Wolf Knight:

your account is compromised
DO NOT TRADE
If you have access to the account

Steps to take NOW to secure the account:
1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)
6. If points were stolen, do a password RESET to cancel the awards/points before they are delivered

Please review how you are logging into Steam, you somehow gave them your log in information. This could of been due to the computer being compromised and redirecting to a fake login, or you using a 3rd party site to login to steam.

Once you are sure you have regained control, you can start trading again. Please triple check any trades you make to be sure they are going to the correct account.

After you have secured the account, please edit your profile back to normal (if it was altered by the hijacker/scammer)

Steam support does not post messages on your profile, they don't give out warnings about pending bans, they dont give time to move stuff, they wont tell you to move stuff. Someone has enough access to the account to make changes to the profile. If you try to move any items, the trade will get cancelled and a new one created sending the items to the scammers accounts.

They do not change your name/avatar unless it violates the rules (advertising, inappropriate language,etc). Such a change would only reset it to the default settings (your steam ID for the name, the default ? avatar for the avatar). This would include an account alert that you have to click a box that says "I have read this"

So I already scanned both my laptop and phone, nothing was found.
Step 2 and 3 are done, Didn't see any API key and step 6 is already a bit late, not that it matters as much, didn't had much in the first place.
Going to check if I can trade now.

[General_Torpedo]

Originally posted by cSg|mc-Hotsauce:

Definite hijacked account. Do not scan the QR code.

And please remove the link.

:cool_seagull:

ok.

[General_Torpedo]

Just realize I cannot trade
I don't have nothing to trade with.

[cSg|mc-Hotsauce]

Originally posted by General_Torpedo:

Just realize I cannot trade
I don't have nothing to trade with.

That is a cooldown for changing your profile name that lasts about 4 hours.

It is protecting your items. Without the cooldown, the hijacker would have been able to empty your inventory before you could react and secure your account.

[General_Torpedo]

Originally posted by cSg|mc-Hotsauce:

Originally posted by General_Torpedo:

Just realize I cannot trade
I don't have nothing to trade with.

That is a cooldown for changing your profile name that lasts about 4 hours.

It is protecting your items. Without the cooldown, the hijacker would have been able to empty your inventory before you could react and secure your account.

:cool_seagull:

No I meant I have Nothing to Trade with, as of "I am poor"
Oh yeah I forgot to mention that my account was "Hijacked" 2 days ago, nothing has happened as of now, didn't had much, so I am pretty sure the hijacker got some steam points from me and that's all

[Aluvard]

Originally posted by General_Torpedo:

Originally posted by cSg|mc-Hotsauce:

That is a cooldown for changing your profile name that lasts about 4 hours.

It is protecting your items. Without the cooldown, the hijacker would have been able to empty your inventory before you could react and secure your account.

No I meant I have Nothing to Trade with, as of "I am poor"

Look for positives - at least nothing was stolen.

[General_Torpedo]

Originally posted by Aluvard:

Originally posted by General_Torpedo:

No I meant I have Nothing to Trade with, as of "I am poor"

Look for positives - at least nothing was stolen.

Exactly.
You can't steal something from a guy that has nothing

[Satoru]

Originally posted by General_Torpedo:

Originally posted by Aluvard:

Look for positives - at least nothing was stolen.

Exactly.
You can't steal something from a guy that has nothing

Note even if your account itself has no value, it can be then used to spam and scam other users on steam. Spam an scams are a numbers game. The more accounts you compromise the more chances you have to get something

[General_Torpedo]

Originally posted by Satoru:

Originally posted by General_Torpedo:

Exactly.
You can't steal something from a guy that has nothing

Note even if your account itself has no value, it can be then used to spam and scam other users on steam. Spam an scams are a numbers game. The more accounts you compromise the more chances you have to get something

If that happens, what could I do?

[Bald dani]

dude my profile got changed

[Wolf Knight]

Originally posted by Crakymellow:

dude my profile got changed

Do what I posted in my first reply to secure the account

[De_1nd_Only]

Same exact thing happened to me…like how tf can someone login and change my profile picture randomly

[Darkwave Dahlia]

Originally posted by De_1nd_Only:

Same exact thing happened to me…like how tf can someone login and change my profile picture randomly

Because you let them.