Repeated account hijacking attempts.

[【= ◈ ︿ ◈ =】]

A week ago, I got a notification in my messages (Screenshot[imgur.com]) that someone had attempted to break into my account. I got Steam Guard codes on my phone (which is bound to my account) which are in Russian. (I am also not Russian.) I was really confused as to how they broke into my account, but I didn't give it much thought and just changed my password.

(The one in English is me resetting my password on my new phone)

A few days after that, it happened again. This time, I was sure there was something more as the password I used was a randomly generated one. I changed it again, and tried to see whether anyone else reported something like this but I only found an old 2015 password exploit and nothing else.

Then it happened again today, while I was out shopping. I changed it again, and got even more notifications even though I JUST changed it. Every single time it was a randomly generated password.


I was wondering if there's a way to report this to Steam directly or somehow stop this person from trying to access my account because it's driving me nuts.
Also, whether anyone else knows anything about this, please do tell me. None of my friends have had this happen to them recently, so I am completely clueless.

(I also apologize if this is the wrong place to post it in. If so, please tell me where I should drop this.)

[Muppet among Puppets]

I am not sure,
but maybe steam support could tell what these SMS codes are for, when you tell them you get them unasked.
That could help understand why it happens. Or if they are even real (based on the number they come from)

[【= ◈ ︿ ◈ =】]

Originally posted by Muppet among Puppets:

changing phone number, changing steam guard, generating backup codes. Or other similar reasons.

Sms codes are not send if someone logs in with the password or for purchases.

Do you think this entire thing is just someone repeatedly attempting to remove my Steam Guard and failing because they don't have access to my account? By clicking that button with "I no longer have access to Steam Guard" on the login prompt.

If so, I think Valve should put an anti-spam on this...

[【= ◈ ︿ ◈ =】]

Originally posted by Muppet among Puppets:

I am not sure,
but maybe steam support could tell what these SMS codes are for, when you tell them you get them unasked.
That could help understand why it happens. Or if they are even real (based on the number they come from)

Where could I talk with someone at Valve directly?

[miamew3]

Originally posted by 【= ◈ ︿ ◈ =】:

Originally posted by Muppet among Puppets:

I am not sure,
but maybe steam support could tell what these SMS codes are for, when you tell them you get them unasked.
That could help understand why it happens. Or if they are even real (based on the number they come from)

Where could I talk with someone at Valve directly?

This maybe?
https://help.steampowered.com/en/wizard/HelpWithSteamIssue/?issueid=809

[【= ◈ ︿ ◈ =】]

Originally posted by miamew3:

This maybe?
https://help.steampowered.com/en/wizard/HelpWithSteamIssue/?issueid=809

Alright, I'll send a report tomorrow, it's late rn. Thanks a whole bunch.
I'll also give an update.

[Muppet among Puppets]

Originally posted by 【= ◈ ︿ ◈ =】:

Originally posted by Muppet among Puppets:

changing phone number, changing steam guard, generating backup codes. Or other similar reasons.

Sms codes are not send if someone logs in with the password or for purchases.

Do you think this entire thing is just someone repeatedly attempting to remove my Steam Guard and failing because they don't have access to my account? By clicking that button with "I no longer have access to Steam Guard" on the login prompt.

If so, I think Valve should put an anti-spam on this...

People who could get your password all the time would not be so stupid to hit the wall each time, and notify you by that.

This could rather be someone trying to recover the wrong account or something.
Only support can see what the actual attempt is. The sms should tell, in my opinion.

[davidb11]

Originally posted by Home Appliance:

Originally posted by 【= ◈ ︿ ◈ =】:

a Youtube video downloader and Return Youtube Dislike

I'd uninstall those if i were you

I'm not sure how those would be considered anything bad or malicious, let alone affect this.
Eh?

[Home Appliance]

Originally posted by davidb11:

I'm not sure how those would be considered anything bad or malicious, let alone affect this.
Eh?

Browser add-ons are notorious for clandestine change of ownership, developers getting offers from malvertisers.

[Dr.Shadowds 🐉]

I forgot about this in my notification.
Op just try this for me humor me alright.

Open your web browser on your PC, go to steam while not login, go to login page, and do password forget.

Now on that page do an account search by using email, if you see multiple accounts that might be the problem. Let us know if you see multiple accounts that you never made, don't recover anything.

If you see nothing there, redo this process instead when ask for email, click no to email, and search by phone number, this time we're checking if there multiple account link to your phone number, shouldn't see more than the accounts you linked, unless you have gave them sms code before, or unless you got this number recently, within years that someone likely didn't unlink their number from their account in the past.


Now for sms code you're getting which it's hard to say either someone trying to do recovery of your account using phone option for password forget, or someone had the number before you, trying to use it. Hard to say for this really.

[davidb11]

Originally posted by Home Appliance:

Originally posted by davidb11:

I'm not sure how those would be considered anything bad or malicious, let alone affect this.
Eh?

Browser add-ons are notorious for clandestine change of ownership, developers getting offers from malvertisers.

Never heard of this issue ever.
And it doesn't make sense with how Firefox or Chrome Addons work.
Good grief.

[Dr.Shadowds 🐉]

Originally posted by davidb11:

Originally posted by Home Appliance:

Browser add-ons are notorious for clandestine change of ownership, developers getting offers from malvertisers.

Never heard of this issue ever.
And it doesn't make sense with how Firefox or Chrome Addons work.
Good grief.

Depends on said addon, as it's possible to have a vulnerability if it interacts with your cookies, and cache, or becomes an exploit to the browser to gaining access.

There are virus versions of some addons scammers mask online to trick people to download them that take control, or collect data from your device.

Often why it's recommed to get it from just browser app store than from 3rd party place, but doesn't mean not possible to have slip ups on there, and when comes to using certain addons like Ublock that getting removed from chrome addon store in the future, if one wish to use said removed addon, it's best to go right to the source that made the addon normally the github that should source all it code on there to see. I know that Ublock Lite is their replacement for chrome in the future because google want play ball with ads on youtube so much.

[davidb11]

Originally posted by Dr.Shadowds 🐉:

Originally posted by davidb11:

Never heard of this issue ever.
And it doesn't make sense with how Firefox or Chrome Addons work.
Good grief.

Depends on said addon, as it's possible to have a vulnerability if it interacts with your cookies, and cache, or becomes an exploit to the browser to gaining access.

There are virus versions of some addons scammers mask online to trick people to download them that take control, or collect data from your device.

Often why it's recommed to get it from just browser app store than from 3rd party place, but doesn't mean not possible to have slip ups on there, and when comes to using certain addons like Ublock that getting removed from chrome addon store in the future, if one wish to use said removed addon, it's best to go right to the source that made the addon normally the github that should source all it code on there to see. I know that Ublock Lite is their replacement for chrome in the future because google want play ball with ads on youtube so much.

Ah. I understand.
I only use official sites, not 3rd party.

As for Chrome, they keep trying to stop adblock, but it keeps happening regardless.
They're never going to stop adblock.
So, they need to give up.

[【= ◈ ︿ ◈ =】]

Originally posted by Dr.Shadowds 🐉:

I forgot about this in my notification.
Op just try this for me humor me alright.

Open your web browser on your PC, go to steam while not login, go to login page, and do password forget.

Now on that page do an account search by using email, if you see multiple accounts that might be the problem. Let us know if you see multiple accounts that you never made, don't recover anything.

If you see nothing there, redo this process instead when ask for email, click no to email, and search by phone number, this time we're checking if there multiple account link to your phone number, shouldn't see more than the accounts you linked, unless you have gave them sms code before, or unless you got this number recently, within years that someone likely didn't unlink their number from their account in the past.


Now for sms code you're getting which it's hard to say either someone trying to do recovery of your account using phone option for password forget, or someone had the number before you, trying to use it. Hard to say for this really.

Right, I'm not sure, it says it finds a single account with this email address, and same for phone number.
Could it be that it's just some person who randomly discovered my phone number and is now spamming it with requests to troll me?

Regardless, I'll contact Steam right now too.

[Dr.Shadowds 🐉]

Originally posted by 【= ◈ ︿ ◈ =】:

Right, I'm not sure, it says it finds a single account with this email address, and same for phone number.
Could it be that it's just some person who randomly discovered my phone number and is now spamming it with requests to troll me?

Regardless, I'll contact Steam right now too.

If you see no additional account under either one, then likely someone trying to link an account using your phone number, or trying to recover account using your phone number.

[Sabrine]

If you need help with Account Security or Recovery, please contact Steam Support.