Authenticator was changed without me knowing and I have lost all my items

[flollo]

Hello today I was wondering If I can get some advice, yesterday overnight it seems I lost all my steam items and my authenticator was changed, this means that all my cs and tf2 skins that i have collected over the years are gone. What I do not understand is how the hacker got to my account and changed everything, I noticed today that this had happened and that all my stuff was gone but I have never once put my account to my knowledge in a position to where it could be compromised I literally only use my pc to game and that is all.

[magicISO Sweden]

Accounts are phished not hacked.

You gave away all your account details.

The account name, the password and the KEY to the door, the Steam Guard Mobile code giving them access to the account.

How? by either logging into a known scam site or sites, tailored malware on your PC, the vote for my team scam, you have a pending ban scam on Discord, free knife click the link etc.

How does Steam (a program) know it is not you when all the account details are correct? It doesn't, therefore any action taken on your account is seen as you doing said actions.

The alternative is not plausible:

1) Someone would have to "GUESS" your account name from "millions of possible combinations".

2) Next they would have to "GUESS" your password from "millions of possible combinations" and then match it to your account name with "millions of possible combinations".

3) And finally they would have to "GUESS" the Steam Guard Mobile code "which changes every 30 seconds" to match both your account name and password to then have access your account.

[J4MESOX4D]

Secure your account and device for starters:-

Scan for malware https://www.malwarebytes.com/
Deauthorize all other devices https://store.steampowered.com/twofactor/manage
Change passwords from a clean computer
Generate new backup codes https://store.steampowered.com/twofactor/manage
Revoke the API key https://steamcommunity.com/dev/apikey

Somewhere along the lines you gave away your credentials to a phishing site or they were captured with tailored malware on a device your account used previous. Your phone may also be compromised too.

[flollo]

But I do not understand because there is no way in which I have logged into a website unless csfloat or marketplace.tf had a breach in which my steamaccount would have its details given away

[J4MESOX4D]

flollo の投稿を引用：

But I do not understand because there is no way in which I have logged into a website unless csfloat or marketplace.tf had a breach in which my steamaccount would have its details given away

Use 3rd party sites at your own risk. These are a hotbed for backdoor phishing attempts and scams.

[magicISO Sweden]

flollo の投稿を引用：

But I do not understand because there is no way in which I have logged into a website unless csfloat or marketplace.tf had a breach in which my steamaccount would have its details given away

you should never use steam login on any sites then steam it self simple

[flollo]

is there a way to unlink from those sites ?