Someone tried to scam me, normally i block and that's it. this time it's scary.

[bombardiro crocodilo]

Got a message from an account saying fraudulent activity has been recorded on my account, stating my email, username and some other info to scare me, that alone i just ignore and block the account.

the thing that DID worry me, is my profile picture being reset and my bio being changed, all my friends were blocked too, except this specific account. i did all the typical things to secure my
account

Had no API keys but still checked it out,
Changed Password on account and connected Email
Looked at login history, nothing to see
looked at authorized devices, only my phone and PC

i'm confused on how this could happen everything indicated my account not being compromised but how could they change info on my profile?

[Hamless Hog]

Sounds like you gave someone access to your account.

"I would start with securing your account and stop using KNOWN scam websites before you have all of your skins stolen.

Steps to take NOW to secure the account:
1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)"

[Capitan Gato]

chevere