Got hacked, Steam support did nothing , anyone else?

[born with horns]

A few days ago I got hacked, no idea how. They spent all my Steam Wallet money and bought a bunch of Dota 2 items that, looking now, are worth like 30 cents,but they paid over $1 each. It was a lot of items.
I submitted a support ticket to Steam with proof, and as usual, they just washed their hands of it.

My question is: has this happened to anyone else?
the only weird thing I remember is getting two random friend requests on the Steam app that I rejected. But a few days later, those same people were suddenly on my friends list. That felt really suspicious, especially since both profiles are private.
Then the inventory stuff happened.

I already changed everything,passwords, codes, closed authorizations, deleted and blocked the accounts. I ran antivirus scans, checked netplwiz, task manager, and nothing looked off. My PC seems clean, and so does my phone.

So... what could’ve happened? And how do I stop this from ever happening again?
I’ve always been super careful with this kind of stuff, and I still don’t get how they managed to get in. I've seen others post about similar stuff happening too...

[Satoru]

https://steamcommunity.com/sharedfiles/filedetails/?id=1126288560

[RPG Gamer Man]

What exactly did steam support say? Can you copy their response on here please?

[Satoru]

Originally posted by RPG Gamer Man:

What exactly did steam support say? Can you copy their response on here please?

I mean they just mean "I didn't get my items back".

[d3str0y3r]

That scam website in your name history is most likely the cause. When you sign into their website you give them your Steam account name, password, and steam guard code. Which is everything they need to get into your account.

[RPG Gamer Man]

Originally posted by d3str0y3r:

That scam website in your name history is most likely the cause. When you sign into their website you give them your Steam account name, password, and steam guard code. Which is everything they need to get into your account.

Yea all third party sites where you trade stuff are scams no matter if they say they are trusted. By who? Your mother? By God? See how this is a slippery slope? You should never trade on external sites. Only trade using steam market. Also be careful on there as they are scams on there too.

[rawWwRrr]

Originally posted by born with horns:

So... what could’ve happened? And how do I stop this from ever happening again?
I’ve always been super careful with this kind of stuff, and I still don’t get how they managed to get in. I've seen others post about similar stuff happening too...

Don't use 3rd party trading sites.

Name Changed - Oct 10, 2024 @ 10:39pm - born with horns
Name Changed - Oct 9, 2024 @ 12:06pm - -Gaming
Name Changed - Aug 21, 2022 @ 7:43pm - playing4funn
Name Changed - Aug 18, 2022 @ 5:36am - leave me alone
Name Changed - Jul 28, 2022 @ 5:50am - born for this
Name Changed - Jul 28, 2022 @ 5:47am - [redacted] < ---- trading site
Name Changed - Jul 24, 2022 @ 6:11pm - < blank >
Name Changed - Jul 22, 2022 @ 3:33pm - mid
Name Changed - Jul 2, 2022 @ 6:13pm - MGK

Can't say for certain but most users complaining about losing items or hijacked accounts always have some history with these trading sites.

[born with horns]

Originally posted by RPG Gamer Man:

What exactly did steam support say? Can you copy their response on here please?

Basically, they told me that Steam doesn’t do refunds, as if I had made the purchase, but well, never mind. I just want to make sure this doesn’t happen again. I don’t need to recover my account because I’ve always been able to access it. The only thing that happened is what I mentioned, and I was sold items. The most curious part is that I didn’t get any warning or Steam Guard code

[born with horns]

Originally posted by rawWwRrr:

Originally posted by born with horns:

So... what could’ve happened? And how do I stop this from ever happening again?
I’ve always been super careful with this kind of stuff, and I still don’t get how they managed to get in. I've seen others post about similar stuff happening too...

Don't use 3rd party trading sites.

Name Changed - Oct 10, 2024 @ 10:39pm - born with horns
Name Changed - Oct 9, 2024 @ 12:06pm - -Gaming
Name Changed - Aug 21, 2022 @ 7:43pm - playing4funn
Name Changed - Aug 18, 2022 @ 5:36am - leave me alone
Name Changed - Jul 28, 2022 @ 5:50am - born for this
Name Changed - Jul 28, 2022 @ 5:47am - [redacted] < ---- trading site
Name Changed - Jul 24, 2022 @ 6:11pm - < blank >
Name Changed - Jul 22, 2022 @ 3:33pm - mid
Name Changed - Jul 2, 2022 @ 6:13pm - MGK

Can't say for certain but most users complaining about losing items or hijacked accounts always have some history with these trading sites.

oh, that makes sense. It's still curious though because I accessed that site in 2022, interesting that my data is still there

[Wolf Knight]

Originally posted by born with horns:

Originally posted by rawWwRrr:

Don't use 3rd party trading sites.


Can't say for certain but most users complaining about losing items or hijacked accounts always have some history with these trading sites.

oh, that makes sense. It's still curious though because I accessed that site in 2022, interesting that my data is still there

they can sit and wait for a long time if they want to before stealing your stuff.

secure the account
If you have access to the account

Steps to take NOW to secure the account:
1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)
6. If points were stolen, do a password RESET to cancel the awards/points before they are delivered


Please review how you are logging into Steam, you somehow gave them your log in information. This could of been due to the computer being compromised and redirecting to a fake login, or you using a 3rd party site to login to steam.

[JD777]

Yes they can and will sit on data for a long time. Maybe they are waiting for enough users to sell in bulk or there is some other reason. Revoke any api keys in step 5 from Wolf Knight too.

[sandokanski]

Originally posted by born with horns:

Originally posted by rawWwRrr:

Don't use 3rd party trading sites.


Can't say for certain but most users complaining about losing items or hijacked accounts always have some history with these trading sites.

oh, that makes sense. It's still curious though because I accessed that site in 2022, interesting that my data is still there

You wouldn't believe it, but there are more people willing to give the scammers access than the scammers can rob. It takes time. You waited in a 2-3 years long queue.
Perhaps you got money in your wallet lately, and they detected it.