Your Steam account: Access from new web or mobile device, is it phising?

[76561199550226818]

I read a lot of forms on this topic, and majority of the people say that this email: "[e-mail]" is phishing.

But under the email showed another email from reddit that my email got changed indicating that my account was hacked into!

NEED HELP

[cSg|mc-Hotsauce]

All the steps, in order...

Scan for malware. https://www.malwarebytes.com/ or with whatever

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes. https://store.steampowered.com/twofactor/manage

Revoke the api key (this should be empty) https://steamcommunity.com/dev/apikey

After you follow all the steps, you can delete the malicious QR code avatar the hijacker put on your profile.