My steam got hacked! Already changed the password. What else can I do?

[kidda]

Guys. my steam was hacked, even with 2 steps verification... I just checked the History and it says its someone from Beijing or Germany, I think its a chinese using vpn because he sent messages in chinese using my account. What else can I do to protect my account? Its been getting hacked since 28th feb, but I just noticed today because one of my friends told me he received strange messages coming from me. The hacker sent a fake link that says I bought a game as gift to my friend and he needs to login in the website to receive it.

[J4MESOX4D]

ALL steps must be done to secure your device and account:-

1. Scan for malware https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
4. Change passwords from a trusted/clean device.
5. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
6. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

[magicISO Sweden]

Accounts are phished not hacked.

You gave away all your account details.

The account name, the password and the KEY to the door, the Steam Guard Mobile code giving them access to the account.

How? by either logging into a known scam site or sites, tailored malware on your PC, the vote for my team scam, you have a pending ban scam on Discord, free knife click the link etc.

How does Steam (a program) know it is not you when all the account details are correct? It doesn't, therefore any action taken on your account is seen as you doing said actions.

The alternative is not plausible:

1) Someone would have to "GUESS" your account name from "millions of possible combinations".

2) Next they would have to "GUESS" your password from "millions of possible combinations" and then match it to your account name with "millions of possible combinations".

3) And finally they would have to "GUESS" the Steam Guard Mobile code "which changes every 30 seconds" to match both your account name and password to then have access your account.