Steam Inventory sold without my knowledge

[KaKa]

I did not receive any authentication of a login, no one has my password. i don't even have the client installed on my pc. but at 2 am today i see all my items being sold and then one main item worth 10$+ and 90+ decoy items bought worth a few cents. i am absolutely disgusted with steam and their support. there isn't really anything i can do. how can someone make a purchase without my knowledge? usually i get confirmation when i'm selling worth more than a few dollars but this time i received nothing.

[rawWwRrr]

Originally posted by KaKa:

no one has my password

If items are being sold off your account without your knowledge, someone has it.

Originally posted by Wolf Knight:

Steps to take NOW:
1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

[KaKa]

Originally posted by rawWwRrr:

Originally posted by KaKa:

no one has my password

If items are being sold off your account without your knowledge, someone has it.

that could be true but it still wouldn't explain why I am not being informed of new purchases. no steam confirmation or login code popped up. my phone was with me the whole time.

and thanks i have already followed all the steps mentioned.

[JohnnyOM-]

Originally posted by KaKa:

Originally posted by rawWwRrr:

If items are being sold off your account without your knowledge, someone has it.

that could be true but it still wouldn't explain why I am not being informed of new purchases. no steam confirmation or login code popped up. my phone was with me the whole time.

and thanks i have already followed all the steps mentioned.

Almost same ushit happen to me.. I was stupid and get trojan then, he sell my skins about 1$ no nof from stream quard or anything

[Unn4m3d (♥AUT♥)]

Originally posted by 𝕵𝖔𝖍𝖓𝖓𝖞𝕺𝕸:

Originally posted by KaKa:

that could be true but it still wouldn't explain why I am not being informed of new purchases. no steam confirmation or login code popped up. my phone was with me the whole time.

and thanks i have already followed all the steps mentioned.

Almost same ushit happen to me.. I was stupid and get trojan then, he sell my skins about 1$ no nof from stream quard or anything

This has nothing to do with Trojan viruses. You logged in on Scamsites, like the one literally in your past Names history.

You gave them everything they need to get into your account, including the Steam Guard code. Do the steps mentioned above. Otherwise your account is still compromised.

[KaKa]

i just received a reply from steam support stating that they basically cannot help with this because they would be removing money from another person's account which creates confusion. that fair but I just hope that they would consider focusing on the main issue i'm trying to raise is that even if someone gains access to my account, they can't disable steam guard without me knowing and i would receive a notification whenever a new item is sold worth some money before creating a listen in market.

[Unn4m3d (♥AUT♥)]

Originally posted by KaKa:

i just received a reply from steam support stating that they basically cannot help with this because they would be removing money from another person's account which creates confusion. that fair but I just hope that they would consider focusing on the main issue i'm trying to raise is that even if someone gains access to my account, they can't disable steam guard without me knowing and i would receive a notification whenever a new item is sold worth some money before creating a listen in market.

You entered your login information somewhere. That's how they got in. You can have a hundred locks on your house, it wont save crap if you give out all the keys to someone.

And yes, Steam Support will not return anything to you, since it's your own fault it happened to begin with. Keep your account secure and nobody can take anything from you.

[KaKa]

Originally posted by Unn4m3d (♥AUT♥):

Originally posted by KaKa:

i just received a reply from steam support stating that they basically cannot help with this because they would be removing money from another person's account which creates confusion. that fair but I just hope that they would consider focusing on the main issue i'm trying to raise is that even if someone gains access to my account, they can't disable steam guard without me knowing and i would receive a notification whenever a new item is sold worth some money before creating a listen in market.

You entered your login information somewhere. That's how they got in. You can have a hundred locks on your house, it wont save crap if you give out all the keys to someone.

And yes, Steam Support will not return anything to you, since it's your own fault it happened to begin with. Keep your account secure and nobody can take anything from you.

nop. never entered login information anywhere.. logged with steam api everytime. and the main purpose of that api is to keep your login info hidden. i am not sure how well versed you are with computers and internet but i wouldn't have been this confident had i not known that something somewhere is wrong despite taking care of everything on my end.

[KaKa]

Originally posted by Unn4m3d (♥AUT♥):

Originally posted by KaKa:

i just received a reply from steam support stating that they basically cannot help with this because they would be removing money from another person's account which creates confusion. that fair but I just hope that they would consider focusing on the main issue i'm trying to raise is that even if someone gains access to my account, they can't disable steam guard without me knowing and i would receive a notification whenever a new item is sold worth some money before creating a listen in market.

You entered your login information somewhere. That's how they got in. You can have a hundred locks on your house, it wont save crap if you give out all the keys to someone.

And yes, Steam Support will not return anything to you, since it's your own fault it happened to begin with. Keep your account secure and nobody can take anything from you.

you still fail to realize that entering password can equip the hackers with nothing since their device has to be authorized when they first log in. and i never got such a notification.

[StickyPawz]

Originally posted by KaKa:

nop. never entered login information anywhere.. logged with steam api everytime. and the main purpose of that api is to keep your login info hidden. i am not sure how well versed you are with computers and internet but i wouldn't have been this confident had i not known that something somewhere is wrong despite taking care of everything on my end.

To sell off your inventory, one needs access to your login + password + a live steamguard code.

You were most likely phished, since you can't remember how/when this happened.

Did you do all the steps from post#1?

Did you find an API key?

[Lilim]

Originally posted by KaKa:

you still fail to realize that entering password can equip the hackers with nothing since their device has to be authorized when they first log in. and i never got such a notification.

You authorized it when you gave away your authentication code.

At some point you have leaked your credentials. Were you asked by a Steam friend to vote for their team or to join a tournament? Did you use any third-party sites for trading or gambling? Did you sign up for free stuff anywhere (skins, keys, games)? The only other possibility would be malware on your computer.

[Unn4m3d (♥AUT♥)]

Originally posted by KaKa:

Originally posted by Unn4m3d (♥AUT♥):

You entered your login information somewhere. That's how they got in. You can have a hundred locks on your house, it wont save crap if you give out all the keys to someone.

And yes, Steam Support will not return anything to you, since it's your own fault it happened to begin with. Keep your account secure and nobody can take anything from you.

nop. never entered login information anywhere.. logged with steam api everytime. and the main purpose of that api is to keep your login info hidden. i am not sure how well versed you are with computers and internet but i wouldn't have been this confident had i not known that something somewhere is wrong despite taking care of everything on my end.

Yes, you did. Somewhere. You can refuse it all you want, but a fact is a fact. I'm well versed with those hijackings, considering they happen daily. And I'll hit you with another fact: Steam Accounts don't get hacked. The only way for them to access your account is by you giving out your information.

[Supafly]

Originally posted by KaKa:

Originally posted by Unn4m3d (♥AUT♥):

You entered your login information somewhere. That's how they got in. You can have a hundred locks on your house, it wont save crap if you give out all the keys to someone.

And yes, Steam Support will not return anything to you, since it's your own fault it happened to begin with. Keep your account secure and nobody can take anything from you.

you still fail to realize that entering password can equip the hackers with nothing since their device has to be authorized when they first log in. and i never got such a notification.

But were NOT talking hackers. We're talking hijackers and hijackers got your username, password AND LIVE Steam Guard code from you. No hacking involved

Somewhere YOU screwed up. Better to accept it and figure out how instead of hurling accusations that won't change anything

[KaKa]

Originally posted by StickyPawz:

Originally posted by KaKa:

nop. never entered login information anywhere.. logged with steam api everytime. and the main purpose of that api is to keep your login info hidden. i am not sure how well versed you are with computers and internet but i wouldn't have been this confident had i not known that something somewhere is wrong despite taking care of everything on my end.

To sell off your inventory, one needs access to your login + password + a live steamguard code.

You were most likely phished, since you can't remember how/when this happened.

Did you do all the steps from post#1?

Did you find an API key?

yes i did... but the question is how would they get the live steam guard since its on my phone and it was with me at that moment. this is basically what i'm trying to uncover.

[Unn4m3d (♥AUT♥)]

Originally posted by KaKa:

Originally posted by StickyPawz:

To sell off your inventory, one needs access to your login + password + a live steamguard code.

You were most likely phished, since you can't remember how/when this happened.

Did you do all the steps from post#1?

Did you find an API key?

yes i did... but the question is how would they get the live steam guard since its on my phone and it was with me at that moment. this is basically what i'm trying to uncover.

Because, again, as I told you before, you entered it on a site. The fact that you have an API Key logged proves my point on that matter.

[KaKa]

Originally posted by Lilim:

Originally posted by KaKa:

you still fail to realize that entering password can equip the hackers with nothing since their device has to be authorized when they first log in. and i never got such a notification.

You authorized it when you gave away your authentication code.

At some point you have leaked your credentials. Were you asked by a Steam friend to vote for their team or to join a tournament? Did you use any third-party sites for trading or gambling? Did you sign up for free stuff anywhere (skins, keys, games)? The only other possibility would be malware on your computer.

question is how would a skin gambling site be able to trade and sell without your permission? is that a known fact that those 3rd party sites get all the privilege's as main user?