How Do Hackers Break Into Your Steam Account?

[Fly Guy]

I don't understand how people can hijack people's account. It takes several process to do so. It requires the hacker to know the email address and its password and the user's real Steam account name because Steam will need the hacker to verify the account before the hacker can have access to it since he's using a different computer.

[76561193857876471]

There's a few ways. Off the top of my head, take remote control of your PC. That doesn't require them to know your password or account name (if you are already logged in), nor to get access to your email. Since your PC is already verified, there are no restrictions.

Or they can get into your email. There they can find your account name, reset your password, and get the Steam Guard code. They can do this by guessing your password, brute forcing it, knowing the answer to the secret question, or using a keylogger.

They could also install malware on your PC that steals the SSFN file Steam uses to recognize your PC, but that's a but more work for a few reasons.

[Fly Guy]

Doesn't remote access of computer freeze activity on the other end. Wouldn't the user on the other end see mouse movements?

How could they hack into the email address since it would be locked after numerous tries?

[76561193857876471]

İlk olarak Kanivakil tarafından gönderildi:

Doesn't remote access of computer freeze activity on the other end. Wouldn't the user on the other end see mouse movements?

It shouldn't, no, and they shouldn't, no. There would simply be a process running in the background.

İlk olarak Kanivakil tarafından gönderildi:

How could they hack into the email address since it would be locked after numerous tries?

I've already touched on this, but there a number of ways. Some people just use very weak or obvious passwords. They could also know the answer to your secret question, or if you use the same password on multiple sites, brute force your password on a web site with more lax security.

//edit// They could also use a keylogger to steal your passwords.

[Fly Guy]

İlk olarak moeroris tarafından gönderildi:

//edit// They could also use a keylogger to steal your passwords.

Yeah. I guess. But it would be very difficult to do with a well protected PC.

[76561193857876471]

The vast majority of malware is either installed willingly by the user, or with some interaction by the person running the computer. A lot of people just don't understand how to keep their PC safe. I don't mean that in a mean way, it's just honestly what often happens.

[Satoru]

1) Phishing -> Users enter their credentials and their steamguard code into a phishing site. That code is then used to log into steam, change the password, and you're out

2) Trojans -> Users download "FREE STEAMCODE AND GAMEZ". File executes and rips our ssfn authentication cookie. Authenticates to your account, changes password, done.

3) User laziness -> Attacker pays $1 for a set of username/passwords. Tries them on steam, odds are a lot of them will work. Users are also lazy and use the same pssword on their emails, presto I'm in.

Users are not 'hacked'. They do the digital equivalent of leaving the doors open to their homes and then are shocked when their home is ransacked

[ŁōãF]

İlk olarak Satoru tarafından gönderildi:

1) Phishing -> Users enter their credentials and their steamguard code into a phishing site. That code is then used to log into steam, change the password, and you're out

2) Trojans -> Users download "FREE STEAMCODE AND GAMEZ". File executes and rips our ssfn authentication cookie. Authenticates to your account, changes password, done.

3) User laziness -> Attacker pays $1 for a set of username/passwords. Tries them on steam, odds are a lot of them will work. Users are also lazy and use the same pssword on their emails, presto I'm in.

Users are not 'hacked'. They do the digital equivalent of leaving the doors open to their homes and then are shocked when their home is ransacked

Agree.

"Hacking" an account doesnt exist,if youre stupid enough to enter your password on a fake website, its your own fault...

[Lilim]

İlk olarak ŁōãF tarafından gönderildi:

Agree.

"Hacking" an account doesnt exist,if youre stupid enough to enter your password on a fake website, its your own fault...

Did you notice that this thread is from 2015?

[ŁōãF]

İlk olarak Lilim tarafından gönderildi:

İlk olarak ŁōãF tarafından gönderildi:

Agree.

"Hacking" an account doesnt exist,if youre stupid enough to enter your password on a fake website, its your own fault...

Did you notice that this thread is from 2015?

No.

[Lilim]

İlk olarak ŁōãF tarafından gönderildi:

No.

How did you even find it ?

[ŁōãF]

İlk olarak Lilim tarafından gönderildi:

İlk olarak ŁōãF tarafından gönderildi:

No.

How did you even find it :scteasinglilim:?

Google :D

[Pscht]

Next time sort by date.

[nullable]

If you google forum posts, you might want to check the date...

[Pscht]

Wow, so edgy.

[Katie]

This thread was quite old before the recent post, so we're locking it to prevent confusion.