Someone sold all sell-able items in my inventory.

[mranch4]

This has been an issue for about a month or more now. First someone bought some items and sold a few. Yesterday though they listed all my items onto the market while I was sleeping and sold them. I don't know if this person has a backdoor onto my computer or something to be able to log onto my Steam account but I'm sick of it. I tried getting help from Valve's support but they weren't able to do anything really since the purchases were through the market. Are there any suggestions on what to do because I'm tired of whoever is getting rid of my stuff.

[The Giving One]

Check this link :

https://steamcommunity.com/dev/apikey

Do you see anything in the domain name text field ? If you do, that's probably the issue. Revoke that key so nothing appears in the text field. There should be nothing there.

[mranch4]

Αναρτήθηκε αρχικά από The Giving One:

Check this link :

https://steamcommunity.com/dev/apikey

Do you see anything in the domain name text field ? If you do, that's probably the issue. Revoke that key so nothing appears in the text field. There should be nothing there.

There's nothing there

[The Giving One]

You can use Steam Guard to deauthorize any other devices that may have access to your account. I would suggest the rest of these steps also :

Scan for malware. https://www.malwarebytes.com/

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes.

[mranch4]

Αναρτήθηκε αρχικά από The Giving One:

You can use Steam Guard to deauthorize any other devices that may have access to your account. I would suggest the rest of these steps also :

Scan for malware. https://www.malwarebytes.com/

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes.

Hopefully everything will be good. Thank you for the assistance.

[The Giving One]

You are welcome. I would have preferred that we actually found that possible back door that was causing this, as then you have closure to the issue.

Accounts are not hacked, so somewhere on your end, the account became compromised somehow, from what you said in the OP.

[mranch4]

Αναρτήθηκε αρχικά από The Giving One:

You are welcome. I would have preferred that we actually found that possible back door that was causing this, as then you have closure to the issue.

Accounts are not hacked, so somewhere on your end, the account became compromised somehow, from what you said in the OP.

Right now I'm using a different PC since I'm not at home right now but once I am I'll see if I can find anything.

[mranch4]

I'm going to self-lock my account right now until I get back home so I don't have to worry about anything.

[The Giving One]

Oh, I see. Yes, of course you need to do the steps on the PC in question. If you deauthorized all other devices from the PC you are using now, unless this is your phone, then the PC you have at home will need to be reauthorized.

But yes, just feel free to reply to the thread if you need further help or find anything.

[Muppet among Puppets]

This are all the steps.
1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey

Αναρτήθηκε αρχικά από The Giving One:

If you deauthorized all other devices from the PC you are using now, unless this is your phone, then the PC you have at home will need to be reauthorized.

Deauthorizing while using auth app does nothing at all.

[El Goblino]

the same thing happened to me twice in a row on the last month , i thought i was safe after changing the password but they still got access to my account , till today i'm still not sure if i'm safe or no , i changed all passes , and i deauthorized all other device and i also cleaned my pc and did a fresh windows install

[The Giving One]

Αναρτήθηκε αρχικά από Muppet among Puppets:

Deauthorizing while using auth app does nothing at all.

Sorry, didn't know. How does one go about doing it if using the auth. app ? Does this mean you have to deauthorize on an actual PC instead for it to work ?

Αναρτήθηκε αρχικά από Darkae:

the same thing happened to me twice in a row on the last month , i thought i was safe after changing the password but they still got access to my account , till today i'm still not sure if i'm safe or no , i changed all passes , and i deauthorized all other device and i also cleaned my pc and did a fresh windows install

A quick look at the huge list of groups you are a part of sends up a lot of red flags as to why. Shady third party sites like "giveaway" sites are risky.

If you did not do the last step above (and the rest possibly) then all that you did will not secure the account. You MUST revoke the API key, if there is one.

And if there is, that is your problem. And the most common cause is logging into shady third party sites and giving away your login in a phishing event.

[El Goblino]

Αναρτήθηκε αρχικά από The Giving One:

Αναρτήθηκε αρχικά από Muppet among Puppets:

Deauthorizing while using auth app does nothing at all.

Sorry, didn't know. How does one go about doing it if using the auth. app ? Does this mean you have to deauthorize on an actual PC instead for it to work ?

Αναρτήθηκε αρχικά από Darkae:

the same thing happened to me twice in a row on the last month , i thought i was safe after changing the password but they still got access to my account , till today i'm still not sure if i'm safe or no , i changed all passes , and i deauthorized all other device and i also cleaned my pc and did a fresh windows install

A quick look at the huge list of groups you are a part of sends up a lot of red flags as to why. Shady third party sites like "giveaway" sites are risky.

If you did not do the last step above (and the rest possibly) then all that you did will not secure the account. You MUST revoke the API key, if there is one.

And if there is, that is your problem. And the most common cause is logging into shady third party sites and giving away your login in a phishing event.

yeah i'm sure that the reason was a third party website , the api key thing is empty does that mean everything should be safe now ?

[The Giving One]

Αναρτήθηκε αρχικά από Darkae:

yeah i'm sure that the reason was a third party website , the api key thing is empty does that mean everything should be safe now ?

It means that the most common cause that we see is not the cause at this point for your account. There are still other ways it can happen, such as the "vote for our team" scams that are around also.

If you have done all of the steps that were posted above from the links, and are sure that's taken care of now, then yes you should be fine, especially if you are using the mobile authenticator.

[El Goblino]

Αναρτήθηκε αρχικά από The Giving One:

Αναρτήθηκε αρχικά από Darkae:

yeah i'm sure that the reason was a third party website , the api key thing is empty does that mean everything should be safe now ?

It means that the most common cause that we see is not the cause at this point for your account. There are still other ways it can happen, such as the "vote for our team" scams that are around also.

If you have done all of the steps that were posted above from the links, and are sure that's taken care of now, then yes you should be fine, especially if you are using the mobile authenticator.

alright thank you so much for your time

[The Giving One]

Αναρτήθηκε αρχικά από Darkae:

alright thank you so much for your time

You are welcome. I can also suggest having a look here since you said you had this happen a couple of times. It's worth it to take a moment and read over this :

https://help.steampowered.com/en/faqs/view/6639-EB3C-EC79-FF60

There is a link in the text that goes to here that also has a lot of good information :

https://www.reddit.com/r/Steam/wiki/scamtypes

Kinda hard to read due to the text visuals, but hope that helps.