Steam account: access from a new computer issue

[tomasmartineznatale]

Hi there!
Lately I´ve been getting emails regarding multiple attempts to access my steam account from a different location, from what appears to be China, which apparently included my correct username and password. It´s been 3 ♥♥♥♥♥♥♥♥ times already; I changed my password over 3 times, I´ve searched for Malware, Keyloggers and everything. The attempts keep happening and it´s starting to both worry me and piss me off; I´m also starting to think it might be a problem on Steam´s side given I´ve done everything I can on my side to no avail, but I can´t find a way to get in touch with steam support either.
Did this ever happen to anybody else, and if so, how did you manage to solve it? Any info would be greatly appreciated.
Thanks!

[Wolf Knight]

did the email address you by your profile name, account name, or Dear Steam User type generic name?

did you check the headers of the email to see where it actually came from?

[tomasmartineznatale]

All seemed legit! They addressed me by Steam username, it seemed like an automated steam email as well (a steam support-no reply type of address).

[Wolf Knight]

Originally posted by tomasmartineznatale:

All seemed legit! They addressed me by Steam username, it seemed like an automated steam email as well (a steam support-no reply type of address).

what is the exact email address it is coming from?

and the emails should be addressing you by your ACCOUNT NAME, not your profile name

[tomasmartineznatale]

The email is [e-mail] , I believe I´ve gotten emails from that address a few times before, and it seemed legit, I mean emails regarding a gift I made to a friend through steam and such,
However, they are addressing me by my profile name, but the previous emails (those about the steam gifts) from the EXACT same address, referred to me by my account name, so that´s weird...

[Wolf Knight]

are you looking at the FULL HEADERS? you have to select that option to see them, it shows every server IP that email went thru. its easy to spoof an email address, that is why you want the FULL HEADERS

[Muppet among Puppets]

Originally posted by tomasmartineznatale:

All seemed legit! They addressed me by Steam username

The login name of the current account? Or the shown name on profile?
Is it part of the email address?

A side note:
If you imagine there was a security incident and someone pulled it off,
do you think they would try to log into your account, several times, knowing they cant login?

[tomasmartineznatale]

Yeah, just checked the full headers, and looked up the IP; seemingly belongs to Valve Corporation

[Muppet among Puppets]

Originally posted by tomasmartineznatale:

Yeah, just checked the full headers, and looked up the IP; seemingly belongs to Valve Corporation

But does the email belong to the account you worry about?

[no154370]

These are the steps we normally post in such threads :

Scan for malware. https://www.malwarebytes.com/

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes.

Revoke the api key https://steamcommunity.com/dev/apikey

------------------------------------------------------------------------------------

just an advice because there might be a chance your Steam Account got compromised.

[Muppet among Puppets]

Originally posted by no154370:

These are the steps we normally post in such threads

In such threads usually people look again and notice that the "hello name" in the email is not their login name of the account they think it was.

[Joke]

Originally posted by Muppet among Puppets:

Originally posted by no154370:

These are the steps we normally post in such threads

In such threads usually people look again and notice that the "hello name" in the email is not their login name of the account they think it was.

This ^

If you are getting emails about someone trying to login, and they keep coming after you changed password, then the most likely reason is that you have an old forgotten account connected to your email.
It's that old account they are trying to login to.

The best solution is that you try to recover the old account, so you can either delete it or change password. (you might have some games on it).

1. Open steam in a browser, and logout if you are logged in.
2. Go to the login page, and choose "Forgot password".
3. Follow instructions.
4. When you get to the step where you search for your account by email address, enter something that doesn't exist. Ex) [e-mail]
5. Steam will report that it didn't find the account, but now there is an option to search by "account name". Use the account name from the failed logins emails. (Should be at the top of the emails)
6. If it found the account, then follow instructions.
7. The goal is to reach a step where you can add your proof that the account is yours.

[J4MESOX4D]

Originally posted by tomasmartineznatale:

All seemed legit! They addressed me by Steam username, it seemed like an automated steam email as well (a steam support-no reply type of address).

Does the account name (login name) match that of the one you use? Many users in this situation whereby the email is legit, actually have a dud or forgotten about account bound to the same email and it is that which is under bot-sweep attacks where they are thwarted by the guard. This is the starting point because users previous have spent endless opportunities changing credentials for an account that's not even being affected.