I received several messages on my phone in Russian

[gothicmaster_cr]

A few months ago, my account was hacked (i clicked on a link from a friend, i was stupid) but i got it back with Steam support and right now it is not compromised. However a few days ago i started receiving SMS messages on my phone, basically stating "Your Steam verification code: XXXXX" as if someone is trying to sign in and the 2FA is triggered. I am not sure why this is happening or what to do about it. I got 3 so far and the number i get them from is the typical 4 digits number where i receive other similar SMS messages such as Airbnb verification codes, info about flights, twitch 2fa, food deliveries etc, so not a number i can block. Any advice ?

[crunchyfrog]

Sounds like someone is trying to get control of your account but cannot because you have 2FA setup. In short, I wouldn't worry unduly.

Check your steam account inventory transactions and such just to be sure and if there's nothing untoward then they haven't got in.

What you can do to make sure is first do a thorough malware and adware scan, then a virus scan, and after you've rebooted, only then change your passwords for both steam and the email account you use.

[magicISO Sweden]

Accounts are phished not hacked.

You gave away all your account details.

The account name, the password and the KEY to the door, the Steam Guard Mobile code giving them access to the account.

How? by either logging into a known scam site or sites, tailored malware on your PC, the vote for my team scam, you have a pending ban scam on Discord, free knife click the link etc.

How does Steam (a program) know it is not you when all the account details are correct? It doesn't, therefore any action taken on your account is seen as you doing said actions.

The alternative is not plausible:

1) Someone would have to "GUESS" your account name from "millions of possible combinations".

2) Next they would have to "GUESS" your password from "millions of possible combinations" and then match it to your account name with "millions of possible combinations".

3) And finally they would have to "GUESS" the Steam Guard Mobile code "which changes every 30 seconds" to match both your account name and password to then have access your account.