HELP I ACCIDENTLY SENT MY SSFN FILES!

[toniteKSA]

I accidentally sent my 2 SSFN files before realizing it was a scam attempt. What should I do? I ONLY sent the SSFN files, I did not send 3 other files he wanted me to.

[Forcen]

GO HERE: https://store.steampowered.com/twofactor/manage

Click on deauthorize all other devices. Maybe do it on another computer if you can so the files you send doesn't matter.

If you have only one PC maybe log out of steam so you have to log back in.

Or wait, delete the files you sent him from steam while you are out from Steam and log back in so they ask you for the code and then deahtorize. you will be unable to trade for a while but that is the safest way.

Did he do something else? Installed anything?
Do you use the steam auth app?

Also how on earth did he convince you to do that? What was the carrot hanging infront of you?

[toniteKSA]

Publicado originalmente por Forcen:

GO HERE: https://store.steampowered.com/twofactor/manage

Click on deauthorize all other devices. Maybe do it on another computer if you can so the files you send doesn't matter.

Did he do something else? Installed anything?
Do you use the steam auth app?

Also how on earth did he convince you to do that? What was the carrot hanging infront of you?

No, I dont use the steam auth app.

And it was my brother that did. Idk why? He sent it to a strange email. I instantly deleted that email, but I'm sure he received it(the scammer).


EDIT: when I tried to de-authorize it said: You do not have any other devices authorized by Steam Guard.

[Forcen]

If you want to be fully safe do the thing where you need to enter the codes again the deathorize all others from the link. safest but will block trade for a while.

The codes will make it seem to be the same device so you need to do it from a new device.

[toniteKSA]

Publicado originalmente por Forcen:

If you want to be fully safe do the thing where you need to enter the codes again the deathorize all others from the link. safest but will block trade for a while.

The codes will make it seem to be the same device so you need to do it from a new device.

Btw, does SSFN bypass steam guard?

[Cathulhu]

That's exactly why phisers ask for those files.

[toniteKSA]

Publicado originalmente por Cathulhu:

That's exactly why phisers ask for those files.

He asked for 5 files, are SSFN files sufficient for him to enter my account?

[toniteKSA]

He asked for,
Both SSFN files. (He got mine)
FROM CONFIG FOLDER:
loginusers.vdf, SteamAppData.vdf
config.vdf.

[Forcen]

Publicado originalmente por buy yo mamma a house:

Publicado originalmente por Cathulhu:

That's exactly why phisers ask for those files.

He asked for 5 files, are SSFN files sufficient for him to enter my account?

What other reason would he ask for them for? Don't think he is testing..
Maybe he did it to seem more legit.

Did you deathorize them?

[Darren]

The others would have supplied him with username data to use with the SSFN. You should delete the SSFN files. Login using Steam guard and deauthorise all other tokens.

[toniteKSA]

Publicado originalmente por Darren:

The others would have supplied him with username data to use with the SSFN. You should delete the SSFN files. Login using Steam guard and deauthorise all other tokens.

He does not know my username, by the way.

Publicado originalmente por Forcen:

Publicado originalmente por buy yo mamma a house:

He asked for 5 files, are SSFN files sufficient for him to enter my account?

What other reason would he ask for them for? Don't think he is testing..
Maybe he did it to seem more legit.

Did you deathorize them?

it says 'You do not have any other devices authorized by Steam Guard.' Idk if he even received the email yet. I think he did not see it, but I deleted it. Will it send anyway?

[Azza ☠]

If the hacker already has your login details (email, steam username and password) normally grabbed via a phishing (faked) login website/application or trojan/keylogger virus, then the SSFN files are sufficient enough to also bypass your Steam Guard and allow full access.

It would be ideal to firstly ensure your PC is secured.

Download, update and run a full scan and/or rootkit scan with SpyBot or similar anti-malware:
https://www.safer-networking.org/mirrors/

Once deemed secure, consider changing your email and steam passwords, etc. Make them at least 8 characters long with numbers and letters (optional: upper/lowercase and symbols). Avoid dictionary words, etc. Have a unique one per account, rather than using same passwords on each.

Check in your Steam > Settings, and manage Steam Guard, deauthorising all other devices.

---

When logging in on a PC you haven’t used before, Steam Guard will pop a window asking for a verification code which will have been sent to your email address. Without the code, you can’t log in, without confirming the email. Hense why a hacker also wants those SSFN files, to bypass that email confirmation.

The SSFN files on your PC consider it to be a valid one and therefore don't require this verifcation code email sent each time. If you deleted the SSFN files on your PC, it will generate a new unique one and send the verification code request back to your email account. So your could rename it and attempt to recreate a new one, making the old one invalid.

[toniteKSA]

Publicado originalmente por Azza ☠:

If the hacker already has your login details (email, steam username and password) normally grabbed via a phishing (faked) login website/application or trojan/keylogger virus, then the SSFN files are sufficient enough to also bypass your Steam Guard and allow full access.

It would be ideal to firstly ensure your PC is secured.

Download, update and run a full scan and/or rootkit scan with SpyBot or similar anti-malware:
https://www.safer-networking.org/mirrors/

Once deemed secure, consider changing your email and steam passwords, etc. Make them at least 8 characters long with numbers and letters (optional: upper/lowercase and symbols). Avoid dictionary words, etc. Have a unique one per account, rather than using same passwords on each.

Check in your Steam > Settings, and manage Steam Guard, deauthorising all other devices.

Nope. I never logged in to a 'fake' steam website. I just sent an email from my steam email. He does not even know my username, unless he can get it from knowing my email. The thing is, I don't want to change my password because I dont feel like waiting 1 week to get off the trade ban annyoing thing. When I tried to deauthorize, it says: 'You do not have any other devices authorized by Steam Guard.'

[Azza ☠]

See lower part edit on previous message above then, in that case. I'm not sure how it will affect your trading however (probably would reset it too), but if you wish to secure yourself.

[toniteKSA]

Publicado originalmente por Azza ☠:

See lower part edit on previous message above then, in that case. I'm not sure how it will affect your trading however (probably would reset it too), but if you wish to secure yourself.

'So your could rename it and attempt to recreate a new one, making the old one invalid.' I don't get it.

[Azza ☠]

Publicado originalmente por buy yo mamma a house:

Publicado originalmente por Azza ☠:

See lower part edit on previous message above then, in that case. I'm not sure how it will affect your trading however (probably would reset it too), but if you wish to secure yourself.

'So your could rename it and attempt to recreate a new one, making the old one invalid.' I don't get it.

Well I mean like close out of the Steam Client, open your steam folder location and delete or rename/move those SSFN files (to backup, your could just rename the file as something else, rename back again if fails... or just move it to another location outside the steam folder).

When you restart Steam, it will notice the SSFN files missing, email your a new verification code, then entered it will recreate new unique SSFN files for you... making the old previous ones invalid to reuse.