Steam new sign in

[Nomad]

Hello guys, I've been receiving these strange emails from steam for some time. They are from the official steam email but the account mentioned is different. Also the way of login is different(I use 2FA, way of login was password) it's the generic new login email but the country keeps changing(first Italy now Spain and I am from neither of them). account name is: my account name with a 1 at the and (Something1). I checked my login history and there was nothing suspicious. What should I do?

[RPG Gamer Man]

Your pc and email are probably compromised. Follow the below steps to help stop this:

1. Scan for malware https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
4. Change passwords from a trusted/clean device.
5. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
6. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

It is possible you gave your info on a trade site or somewhere. Also, be aware of those official steam emails as they can be spoofed and look like their official, but could be fake. A good way to check is to see who the sender is in the address.

[Nomad]

Originally posted by RPG Gamer Man:

Your pc and email are probably compromised. Follow the below steps to help stop this:

1. Scan for malware https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
4. Change passwords from a trusted/clean device.
5. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
6. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

Regarding items:
https://help.steampowered.com/faqs/view/3B6E-B322-2400-8D24

Here you've what Steam Guard is and what it isn't:
https://help.steampowered.com/en/faqs/view/06B0-26E6-2CF8-254C

As you notice, even Valve admits the possibility that Steam Guard will be bypassed and details the most common ways scammers do it. Also they openly admit that Guard is merely an extra layer.

My steam account looks safe(no shady log-ins, numbers still mine etc) but it feels like someone is trying to get me to change my password/de-activate 2FA by tricing me with an account name very similar to mine. I think my e-mail might be compromised. Otherwise I don't know how they used it for an account that isn't mine? Can we assign an email to an account without any verification?

[RPG Gamer Man]

Originally posted by Nomad:

Originally posted by RPG Gamer Man:

Your pc and email are probably compromised. Follow the below steps to help stop this:

1. Scan for malware https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
4. Change passwords from a trusted/clean device.
5. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
6. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

Regarding items:
https://help.steampowered.com/faqs/view/3B6E-B322-2400-8D24

Here you've what Steam Guard is and what it isn't:
https://help.steampowered.com/en/faqs/view/06B0-26E6-2CF8-254C

As you notice, even Valve admits the possibility that Steam Guard will be bypassed and details the most common ways scammers do it. Also they openly admit that Guard is merely an extra layer.

My steam account looks safe(no shady log-ins, numbers still mine etc) but it feels like someone is trying to get me to change my password/de-activate 2FA by tricing me with an account name very similar to mine. I think my e-mail might be compromised. Otherwise I don't know how they used it for an account that isn't mine? Can we assign an email to an account without any verification?

Not unless it got compromised. Change your email password. It may still happen, as i think your pc is compromised. I still suggest doing the above things i posted on here. Only sure way is to follow the steps above and make sure the pc is clean.

[Nomad]

Originally posted by RPG Gamer Man:

Originally posted by Nomad:

My steam account looks safe(no shady log-ins, numbers still mine etc) but it feels like someone is trying to get me to change my password/de-activate 2FA by tricing me with an account name very similar to mine. I think my e-mail might be compromised. Otherwise I don't know how they used it for an account that isn't mine? Can we assign an email to an account without any verification?

Not unless it got compromised. Change your email password. It may still happen, as i think your pc is compromised. I still suggest doing the above things i posted on here. Only sure way is to follow the steps above and make sure the pc is clean.

Yup gotta check for malwares. I think someone is trying to get me to lift 2FA. Checked the email, phone number, recent logins, associated accounts and nothing suspicious on that end. Checked the email and recent logins there and that looks okay too. Only thing I can think of now is it's either a 3rd party app on my phone or a malware on the pc.