Fake recovery requests

[Ariteuz]

So my idiot self managed to accidentally install malware that cookie logged me and got into my email. Several of my platforms were hacked and I’ve only managed to salvage steam and EA. However, when the intruder was in my email they managed to steal information from me and put in 3 account recovery requests for my steam after they couldn’t bypass my steam guard and password change. I’m paranoid something will happen and I don’t know what I can do to secure my account or if I’ll wake up after posting this and it’ll be gone. What are some steps I can take to protect it?

[DarkCrystalMethod]

Scan for malware(malwarebytes seems popular).
Change your steam password, remember it and quickly go to Settings and click deauthorize all devices. That will log everyone out, you and him... and any trade sites if you were into that.
Log back in with your new password, make sure steam guard is on and be careful what you click/install.

(*There are a few more steps, and hopefully one of the guys who has the whole thing in his clipboard will paste it here*)

[Ariteuz]

I appreciate the help dude, I've been stressing out thinking its all gonna go wrong for the past hour lol. I've changed my password and deauthorized all devices and setup steam guard and what not. I'm just nervous that they recorded sensitive information that will be used if they file for a recovery. I know there's nothing really to do about that but thank you so much for reaching out its eased my mind a lot.

[Aluvard]

Follow steps 1-6 to secure your account:

1. Scan for malware https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
4. Change passwords from a trusted/clean device.
5. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
6. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)