[SERIOUS]What is with people logging into my account!

[CorollaGaming]

Is it just me because I keep getting sign in requests when it’s not me? Luckily I have mobile authentication. Please discuss and speak up because I never post here.

[Phénomènes Mystiques]

I used to get this long ago, the Steam Guard would say someone was logging in from different places, but then it stopped suddenly (plus I changed my password to be safe).

[Kargor]

If you're getting Steam-Guard codes (or your mobile device tells to confirm), it means someone knows your username/password combo. This is not a major problem since they are still missing the 2FA component, but you should change the password, and contemplate how they might have gotten the password -- for example, are you using the same username/password combo on other sites too, so they might have gotten it from there?

[HikariLight]

Have you used any third party trading/gambling sites that require you to login via your Steam account?
If so, that could be your security hole.
ALL of those trade/gambling sites are SCAM sites, they will sit on your login info for a while before trying to use it.

[CorollaGaming]

Ursprünglich geschrieben von WinterSorrow:

I used to get this long ago, the Steam Guard would say someone was logging in from different places, but then it stopped suddenly (plus I changed my password to be safe). :csd2smile:

Changed my password as well

[CorollaGaming]

Ursprünglich geschrieben von Kargor:

If you're getting Steam-Guard codes (or your mobile device tells to confirm), it means someone knows your username/password combo. This is not a major problem since they are still missing the 2FA component, but you should change the password, and contemplate how they might have gotten the password -- for example, are you using the same username/password combo on other sites too, so they might have gotten it from there?

Yeah hehe.

[CorollaGaming]

Ursprünglich geschrieben von HikariLight:

Have you used any third party trading/gambling sites that require you to login via your Steam account?
If so, that could be your security hole.
ALL of those trade/gambling sites are SCAM sites, they will sit on your login info for a while before trying to use it.

Scrap.tf, Marketplace.tf, Leetify, CSGO skins, Plarium Play (a while ago). Those are all of the third party sites I used with my Steam account.

[HikariLight]

Ursprünglich geschrieben von goofy goober cat warrior:

Ursprünglich geschrieben von HikariLight:

Have you used any third party trading/gambling sites that require you to login via your Steam account?
If so, that could be your security hole.
ALL of those trade/gambling sites are SCAM sites, they will sit on your login info for a while before trying to use it.

Scrap.tf, Marketplace.tf, Leetify, CSGO skins, Plarium Play (a while ago). Those are all of the third party sites I used with my Steam account.

They are ALL scam sites.
Stop using them.
The people running the sites steal your login info.

[CorollaGaming]

Oh shart, well damn. Anyway to fix that? (But still I will use Scrap.tf and Marketplace.tf in the future, no changing that)

[CorollaGaming]

(Sorry)

[J4MESOX4D]

Do ALL steps if you haven't done so already

Scan for malware. https://www.malwarebytes.com/ or with whatever.

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes. https://store.steampowered.com/twofactor/manage

Revoke the api key (this should be empty) https://steamcommunity.com/dev/apikey

use third party sites at your own risk.

[CorollaGaming]

MY GOSH THANKS SO MUCH

[CorollaGaming]

Gonna do it now

[CorollaGaming]

Avast one free says no malware or anything

[J4MESOX4D]

Ursprünglich geschrieben von goofy goober cat warrior:

Avast one free says no malware or anything

That's good, so the chances are you credentials were captured by a phishing site after you gave them away. Finish up the rest of the steps and then you'll be good to proceed.

[CorollaGaming]

Deauthorized all devices