My sons email was hacked and Steam Account changed.

[Carstian]

Earlier today my Son got a message from a "Friend" on discord, saying they had accidentaly reported him for fraud, then some other guy who claimed he was a steam moderator told him he was going to block the steam account if we couldn't prove the payment was ours. Obvious scam, But he changed my sons e-mail account and steam password. I followed all the steps through the support from stolen/hacked account, but it doesn not help here, the email was changed to 'this guy on discord's e-mail. When I click the link to provide proof of ownership, it gives me an error. What can I do now?

[Zekiran]

You need to be logged OUT of steam to recover your son's account, and when it asks for an email you can just put in garbage and it'll ask for something new.

How to recover your account
https://steamcommunity.com/sharedfiles/filedetails/?id=1126288560

And in the meantime also,

Scan for malware. https://www.malwarebytes.com/

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes. https://store.steampowered.com/twofactor/manage

Revoke the api key https://steamcommunity.com/dev/apikey
** If there is nothing in the API key area, that’s fine. If there IS something, remove it. Nothing should be there.**

No items that have been traded away during this time will be returned to you.

Change your Email’s password on your computer for safety

Also report the account’s profile as scammer, and tell your kid to STOP visiting 3rd party trade sites!! Don't let them believe that Discord is safe...

[Carstian]

Going to try this step by step guide. I am working from my Computer now, His has been taken off line until I get this sorted.

[Carstian]

And Thank you for the reply!

[Zekiran]

Just be patient with support as you're hardly the first today and won't be the last, :) It might take a little while to get it rolling and finished.

[Carstian]

Thank you again, The ticket is posted, and now we play the waiting game. I think I will spend the next few hours reiterating "Information on the Internet is never safe" to my kiddo...

[shiel]

GSharp740 の投稿を引用：

Carstian の投稿を引用：

Thank you again, The ticket is posted, and now we play the waiting game. I think I will spend the next few hours reiterating "Information on the Internet is never safe" to my kiddo...

never click links, unless you know what they are. To scan for virus buy a virus software then scan or if on windows use windows defender and turn all virus protection settings on, make sure they are on before you scan. If you have a virus and can't remove it your self, you would have to take it to a professional. If you have a paid virus protection they typically remove it though.

Also discord is very unsafe, it gets hack 24/7 never join a discord from someone you don't know or message them. If you got hack by discord, you might see messages from your discord account that you didn't send if that's the case, make sure you change password/ email for everything if it is the same information you use for other sites.

Also remove the person who send you the link unless you know them in real life. If you know them in real life then their account is compromised and you should call them and tell them to do the same steps as well.

I don't think they were looking for advice on the lecture...

[Dr.Shadowds 🐉]

Carstian の投稿を引用：

Thank you again, The ticket is posted, and now we play the waiting game. I think I will spend the next few hours reiterating "Information on the Internet is never safe" to my kiddo...

Here some extra tips can share as well. Also if your son using same password for other services, it's recommended to change all that as well so they don't get hijacked either down the road.

Dr.Shadowds 🐉 の投稿を引用：

Here are the most common reason people get accounts hijack for any service really are as followed.
- Sharing account infomation with others. <--- Very common with impersonators, pretending to be Steam admin / support.
- Logging in on phishing sites. <--- Very common with skin gambling sites.
- Downloading / Installing Virus / Keylogger on your system.
- Using public devices that has keyloggers, such as cyber cafe, school computers, and etc...
- Storing your login credentials on a unsecured service that others has access to view.
- Using same login credentials for all your things, or using same login credentials on another service that had a data leak. Yes it does matter because even if it not related to Steam, if using same login credentials, hijackers will try to use those credentials to see what services you use with those credentials. https://haveibeenpwned.com/

https://youtu.be/9TRR6lHviQc

The type of story scammers say to you.

- "Hey vote for my team", and they link you a phishing site link, and try get you to login.

- "Hey I can't add you, please add me", and they try to start their scam with you.

- If you're friend with someone that got their account hijacked, you get scam message like, "I report you", "you been banned", and whatever to try scare you, and they tell you to trade your items to them, or if you have a login to phishing site may have a API key on account that redirect trades, they ask you to give them money, or etc...

- If you already got your account compromise by them, they change your display name to banned, or whatever, your display picture as well, they may delete your friends, and try to spend your wallet funds if you have any, also trade all your items, but if they see if you have mobile authenticator attached, they play their scam to get you to confirm the trade to get your items off your account to their account quicker if they're able to trick you into confirming the trade.


I show you few examples.
https://steamcommunity.com/sharedfiles/filedetails/?id=2329645315
https://steamcommunity.com/sharedfiles/filedetails/?id=2570975058

https://youtu.be/JuWHCBeZrqI
https://www.youtube.com/watch?v=kook1DlxDAw
https://www.youtube.com/watch?v=0DDnV-MHSaY
https://www.youtube.com/watch?v=WfTXxLraokE

https://steamcommunity.com/discussions/forum/1/4956744526904317093/#c4956744526904653890

GSharp740 の投稿を引用：

Carstian の投稿を引用：

Thank you again, The ticket is posted, and now we play the waiting game. I think I will spend the next few hours reiterating "Information on the Internet is never safe" to my kiddo...

never click links, unless you know what they are. To scan for virus buy a virus software then scan or if on windows use windows defender and turn all virus protection settings on, make sure they are on before you scan. If you have a virus and can't remove it your self, you would have to take it to a professional. If you have a paid virus protection they typically remove it though.

Also discord is very unsafe, it gets hack 24/7 never join a discord from someone you don't know or message them. If you got hack by discord, you might see messages from your discord account that you didn't send if that's the case, make sure you change password/ email for everything if it is the same information you use for other sites.

Also remove the person who send you the link unless you know them in real life. If you know them in real life then their account is compromised and you should call them and tell them to do the same steps as well.

Don't spread misinformation. Discord not hacked, it's people getting themselves scammed, or downloading things from other people that scamming them such as malware, and ransomware. Yes there no reason to join anyone discord if don't know them, but that not how you get hacked / hijacked. When encountrting scammers via discord you have to report them here. https://support.discord.com/hc/en-us/requests/new Not sure why discord doesn't have a build in report function as of yet to this day.

Using a decent Anti virus is good enough for most things, either using Windows defender if on Windows, or using a free services like Avest, or AVG, or if want go little more then paid service might do as well such as Bitdefender, or such. But this doesn't stop the end user from doing dumb things like downloading things from others that has malware, or such that might bypass the anti virus, if unknown to them in the 1st place, but often active good anti virus should be good to catch some of them, but still to save one self from trouble is to not do dumb things such as randomly downloading things from others, and trying to run them if have no idea what it is in the 1st place, even then no reason to ever provide anyone private info either just because someone, or a website askes for it.