How do people steal an account that has Mobile verification?

[Lo Burattino]

When I first got mobile steam verification, I thought I was basically safe from any form of thief.

But nowadays endless threads of people asking for help due to their account having been hacked despite having mobile worries me.

In short, I'm asking how can someone steal your account, despite having to go throught mobile verification, which is something only the original user can do?

[d3str0y3r]

Simple they are falling for scams and giving the code away a long with the rest of their login details.

Steam Guard is just another layer of security and with any security it's only as good as the weakest link, that would be the user.

[Crazy Tiger]

Phishing, or malware (keylogger). When people get phished, they give away their login name, password and then active Steam guard code.

[Lo Burattino]

Originally posted by 🎃👻d3str0y3r👻🎃:

Simple they are falling for scams and giving the code away a long with the rest of their login details.

Steam Guard is just another layer of security and with any security it's only as good as the weakest link, that would be the user.

So, these people have their account stolen not by some form of magical hacking that attacks their phone, but because they just blindly accept to give away their code?

Originally posted by Crazy Tiger:

Phishing, or malware (keylogger). When people get phished, they give away their login name, password and then active Steam guard code.

this explains name and password, not mobile code tho

[Muppet among Puppets]

You need to be as cautious as if you only had 1 passowrd.
Because most of the time, 2fa is just another password.

If things go wrong, steam guard app could be the more wrong choice.
Too many examples to write them all here. Just act as if you only have 1 password.

[Muppet among Puppets]

Originally posted by Lo Burattino:

Originally posted by Crazy Tiger:

Phishing, or malware (keylogger). When people get phished, they give away their login name, password and then active Steam guard code.

this explains name and password, not mobile code tho

This explains that your perception of steam guard, 2 factor codes etc is wrong.

[Lo Burattino]

Originally posted by Muppet among Puppets:

Originally posted by Lo Burattino:

this explains name and password, not mobile code tho

This explains that your perception of steam guard, 2 factor codes etc is wrong.

uh...

[Waffle :3]

simply people falling for scams by trying to login to steam but its not an actual steam login so they basically gave their account name, password, and mobile code away to somebody else that takes their account

[Lo Burattino]

Originally posted by SwagBoyGavin:

simply people falling for scams by trying to login to steam but its not an actual steam login so they basically gave their account name, password, and mobile code away to somebody else that takes their account

yeah ok but how can someone get the mobile code? how's this possible unless you yourself just tell them that

[Muppet among Puppets]

Originally posted by Lo Burattino:

Originally posted by SwagBoyGavin:

simply people falling for scams by trying to login to steam but its not an actual steam login so they basically gave their account name, password, and mobile code away to somebody else that takes their account

yeah ok but how can someone get the mobile code? how's this possible unless you yourself just tell them that

By inserting it in the wrong login field. Same as the other details.

[Dr.Shadowds 🐉]

I keep it simple, and give you example.
Scammer: Please vote for my team *gives you scam link*.

User: Sure.
*Visit the scam link*
*Click on "Steam" login button on scam site*
*Site gives you a fake look alike steam page*
*Logs into the fake page with username, password, and code*

User: What team am I voting.

Scammer: *Blocks user* or *Ignores user* since they know they scam the user.

Now was anything in that example confusing to you OP?





Examples scammers will use are as follow to try scam users:
- I accidentally reported you, you need to contact this person *gets you to contact a another scammer that impersonating as support*

- You have pending ban *gives you fake images, gifs, or videos*

- You won something *gives you scam link* <--- just like top example.

Another way is scammers trying to trick you into installing virus on your system, or other means to tricking you giving something to them to use agasint you.

[Lo Burattino]

Originally posted by Muppet among Puppets:

Originally posted by Lo Burattino:

yeah ok but how can someone get the mobile code? how's this possible unless you yourself just tell them that

By inserting it in the wrong login field. Same as the other details.

Originally posted by Dr.Shadowds 🐉:

I keep it simple, and give you example.
Scammer: Please vote for my team *gives you scam link*.

User: Sure.
*Visit the scam link*
*Click on "Steam" login button on scam site*
*Site gives you a fake look alike steam page*
*Logs into the fake page with username, password, and code*

User: What team am I voting.

Scammer: *Blocks user* or *Ignores user* since they know they scam the user.

Now was anything in that example confusing to you OP?





Examples scammers will use are as follow to try scam users:
- I accidentally reported you, you need to contact this person *gets you to contact a another scammer that impersonating as support*

- You have pending ban *gives you fake images, gifs, or videos*

- You won something *gives you scam link* <--- just like top example.

Another way is scammers trying to trick you into installing virus on your system, or other means to tricking you giving something to them to use agasint you.

ah, im stupid, I get it now

Basically the mobile code is worthless if you use it as you login in the wrong site.

Is it any different if you simply use confirmation instead of the code when logging in?

[Dr.Shadowds 🐉]

Originally posted by Lo Burattino:

ah, im stupid, I get it now

Basically the mobile code is worthless if you use it as you login in the wrong site.

Is it any different if you simply use confirmation instead of the code when logging in?

Everyone learns differently doesn't make them stupid so don't worry. Also no there no difference by using code, or confirmation because both do the same.

Example with code you have to input it, and code changes each time, as they're one time use as well.

Example with confirmation, you have to click confirm, and that it.

As both end in giving access in the end by the user, that why some people say user is the weakest link in secuity because that actually true due to user not paying attention, or falling for scam they don't know, or understand. That why learning is great way to improving one self, as well asking for advice, or help from others from the community so get more info, and the help you seek.

[Lo Burattino]

Originally posted by Dr.Shadowds 🐉:

Originally posted by Lo Burattino:

ah, im stupid, I get it now

Basically the mobile code is worthless if you use it as you login in the wrong site.

Is it any different if you simply use confirmation instead of the code when logging in?

Everyone learns differently doesn't make them stupid so don't worry. Also no there no difference by using code, or confirmation because both do the same.

Example with code you have to input it, and code changes each time, as they're one time use as well.

Example with confirmation, you have to click confirm, and that it.

As both end in giving access in the end by the user, that why some people say user is the weakest link in secuity because that actually true due to user not paying attention, or falling for scam they don't know, or understand. That why learning is great way to improving one self, as well asking for advice, or help from others from the community so get more info, and the help you seek.

ah very well then, thank you

[Muppet among Puppets]

Originally posted by Lo Burattino:

Is it any different if you simply use confirmation instead of the code when logging in?

There is no safe way to try to login to a fake site.
The only benefit the qr code login gives, you dont hand out codes that can do a lot more than just logging in.

[啤酒射擊]

I have q to , have can steel steam acc if same steeled and you dont see that ? My mein acc steeled 97 day ago i trying recowery a steam not ansver to me , acc chenge a pfone nomber a gmail amd pasword a that in my gmail i not see gvard same same remove and my pfone i dont see a masage for that to,
Have i can get beck steam ?? If steam can help?