Vote for my team scam

[Debiruman]

Hey guys just got this message from someone impersonating one of my friends and found out it was a scam, I clicked the link but somewhat fortunately I couldnt remember my credentials correctly before I sort of caught on to it. I immediately changed my password, is there anything else I should watch out for or change?

[DarkCrystalMethod]

Block and report your friend's account(There's an option for 'account was hijacked' that will probably end better). Thats no longer your old pal.

[Debiruman]

Seems like they already unfriended me and possibly blocked me. Should I be worried about anything else? Dunno if im compromised at all by just clicking the link >__>;

[DarkCrystalMethod]

Originally posted by Debiruman:

Seems like they already unfriended me and possibly blocked me. Should I be worried about anything else? Dunno if im compromised at all by just clicking the link >__>;

Your failed password attempts probably gave them your actual password or something really close to it. Glad you changed it, but just to be sure, click on the subtle 'deauthorize all devices' button in Settings. You'll have to log in again with your new password. Enjoy the captcha(click on all the images that contain traffic lights, etc)

[cSg|mc-Hotsauce]

The "Vote for my team" variants of the phishing scam link has been going around for over a decade.

https://help.steampowered.com/en/faqs/view/7958-1D76-CA26-7BB4

[peppermint hollows]

All steps to follow to be completely sure your account is safe:

1. Scan for malware. https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices. https://store.steampowered.com/twofactor/manage
4. Change passwords from a clean computer.
5. Generate new backup codes for your Mobile App. https://store.steampowered.com/twofactor/manage
6. Revoke the API key (there should be no key). https://steamcommunity.com/dev/apikey

[Debiruman]

Thanks for the help yall hopefully theres no huge issues