Steam Guard is proven useless ONCE AGAIN.

[Reno]

Okay, just logged into my Steam account. Found a Steam Notification telling me that my Steam Account has just been hacked.

The people who hacked me were from Portugal, and from what it said, showed me that they got into my account TWICE. They had an I.P of 89.152.28.90.

So my account password is almost uncrackable and I have not entered it in any phising sites, I have fallen for that one in the past, and will not again.

So they were able to get my password - fair enough. They should have not gotten into my account in the first place as Steam Guard should have actually done something about this. A verification code should have been sent to me as they didn't change my account contact address password, but that wasn't there either. My emails password is different to my Steam password in addition to what I was just saying.

I dont know what the hell Steam Guard was doing, and why it didn't work. Would someone please explain? Steam Guard is terrible.

[Air]

This might offer some insight: https://blog.malwarebytes.org/fraud-scam/2014/04/phishers-bypass-steam-guard-protection/

[Reno]

Yeah, read this article earlier. Didn't explain what I was looking for.

[ KARR™]

No-one can say what you did or didn't do because whatever they say, you're going to say "no, didn't do that!".

[Satoru]

Your account and computer are all compromised. SteamGuard did not fail. You did

1) Format the computer
2) Enable SteamGuard
3) Use gmail/hotmail
4) Enable two factor authentication on your email
5) ensure your email password is unique and NOT REUSED
6) Ensure your steam password is unique and NOT REUSED and NOT THE SAME as your email password

[HLCinSC]

They must of gained access to your email or computer.

[Reno]

Originally posted by Satoru:

Your account and computer are all compromised. SteamGuard did not fail. You did

1) Format the computer
2) Enable SteamGuard
3) Use gmail/hotmail
4) Enable two factor authentication on your email
5) ensure your email password is unique and NOT REUSED
6) Ensure your steam password is unique and NOT REUSED and NOT THE SAME as your email password

Steam Guards enabled, I use gmail, everything else is unique. I have not got two factor authentication (I don't think). So I'll enable that at once.

[Brujeira]

This might not be the problem, but how long have you used GMail and when was the last time you changed your email password?

http://www.pcworld.com/article/2605400/five-million-gmail-addresses-and-passwords-dumped-online.html

[Pheace]

Originally posted by Air:

This might offer some insight: https://blog.malwarebytes.org/fraud-scam/2014/04/phishers-bypass-steam-guard-protection/

That was really badly phrased since they're still not able to get around the protection without the phished user *uploading* a file from their own computer.