All Discussions > Steam Forums > Help and Tips > Topic Details

CRASHOUT KAIZEN Dec 16, 2022 @ 9:18am

Am I actually gonna get banned or Hijacked!?!?

I was playing mw2 then out of nowhere, random bot chatted me somehow and threatened to Trade Ban me... Once I closed I noticed all my settings, payment options, featured items, comments, description and history of names and friends, all gone but my inventory with the steam64-banned as my profile link. I panned and changed password after I did a offline scan with windows security, I made sure my settings was on and turned on firewall. I changed my banking passwords followed by every single account I made that might had payment history and everything, then went back on computer and tried changing username but it reverted back to the steam64, so I changed the password on my phone and it stopped reverting itself. I got no official alerts from steam but the very message and was so random. I only bought and sold skins so I don't see how I would ever be trade banned at all. This is a streaming set up so all I have on it is obs, steam, blizzard, origin, fivem, minecraft, epic games and discord. I don't download random files, don't bother with links I don't know about, I don't even watch porn on this set up, this is a strongly professional and clean computer which confused me the most on how tf did my ♥♥♥♥ changed instantly without a login notice or anything in steam/mobile guard and emails. I am not logging into anymore games or accounts on the computer until I get answers because nothing from my anti virus and windows defender combined came up with anything on the computer so what is going on? Is this ban real? Am I being Hijacked? How do I counter it if so?
Here is chat logs from the very bot: https://gyazo.com/90a67fb6ce2441c7db4c5a404c152685

CAN SOMEONE PLEASE TELL ME WHAT IS GOING ON PLEASE

(SOLUTION IS SOLVED THANKS TO CHAD COMMENTERS)

Last edited by CRASHOUT KAIZEN; Dec 16, 2022 @ 11:08am

Something went wrong while displaying this content. Refresh

Error Reference: Community_9708323_

Loading CSS chunk 7561 failed.
(error: https://community.fastly.steamstatic.com/public/css/applications/community/communityawardsapp.css?contenthash=789dd1fbdb6c6b5c773d)

< 1 2 >

Showing 1-15 of 27 comments

Cathulhu Dec 16, 2022 @ 9:23am

Your account is already compromised. Do not trade anything. Secure the account now.

You leaked your account credentials somehow. Find out how!

Last edited by Cathulhu; Dec 16, 2022 @ 9:24am

Jerry Dec 16, 2022 @ 9:24am

You've been hijacked after entering your login into a phishing site at some point in the past. Here are the usual steps, you need to take.

DO NOT TRADE ANYTHING UNTIL YOU ARE DONE. ALL TRADED ITEMS WILL BE STOLEN (that's the whole point of the scheme and the reason, they are trying to scare you).

Deauthorize all devices https://store.steampowered.com/twofactor/manage
Change your password on a secure device.
Generate new back up codes. https://store.steampowered.com/twofactor/manage
Revoke the api key https://steamcommunity.com/dev/apikey

In the future, do not do Steam logins on other websites. Instead do a browser login on the website of Steam (store.steampowered - bookmark it to avoid copycats). Every website, that needs a Steam login, will recognise this and allow you to confirm your account.
If it still asks for your name and password, it is not a real Steam login.

Omen Dec 16, 2022 @ 9:42am

that gyazo link is safe correct? also yeah check your account

Last edited by Omen; Dec 16, 2022 @ 9:43am

CRASHOUT KAIZEN Dec 16, 2022 @ 9:48am

Originally posted by Jerry:
You've been hijacked after entering your login into a phishing site at some point in the past. Here are the usual steps, you need to take.

DO NOT TRADE ANYTHING UNTIL YOU ARE DONE. ALL TRADED ITEMS WILL BE STOLEN (that's the whole point of the scheme and the reason, they are trying to scare you).

Deauthorize all devices https://store.steampowered.com/twofactor/manage
Change your password on a secure device.
Generate new back up codes. https://store.steampowered.com/twofactor/manage
Revoke the api key https://steamcommunity.com/dev/apikey

In the future, do not do Steam logins on other websites. Instead do a browser login on the website of Steam (store.steampowered - bookmark it to avoid copycats). Every website, that needs a Steam login, will recognise this and allow you to confirm your account.
If it still asks for your name and password, it is not a real Steam login.

Tyvm, I've just now gotten done with all that and will keep such value info for the safe future ahead. Ty again <3

Omen Dec 16, 2022 @ 10:39am

Originally posted by Omen:
that gyazo link is safe correct? also yeah check your account

wait i just wanna get this answered lmao

Lilim Dec 16, 2022 @ 10:43am

Originally posted by Omen:
Originally posted by Omen:
that gyazo link is safe correct? also yeah check your account
wait i just wanna get this answered lmao

Just don't click on random links.

Better safe than sorry

Last edited by Lilim; Dec 16, 2022 @ 10:51am

CRASHOUT KAIZEN Dec 16, 2022 @ 10:47am

Originally posted by Omen:
Originally posted by Omen:
that gyazo link is safe correct? also yeah check your account
wait i just wanna get this answered lmao

if you don't know, gyazo is a screenshot/capture app, very very useful and why would I put a unsecured... deja vu holy... link in a discussion about an security issue which is now resolved?

CRASHOUT KAIZEN Dec 16, 2022 @ 10:48am

Originally posted by Lilim:
Originally posted by Omen:
wait i just wanna get this answered lmao

Just don't click on random links.

Better safe than sorry :hp_kyu:.

ofc, ty for advice

Omen Dec 16, 2022 @ 10:49am

googled it, seems trustworthy, idk why you would either, cheers man

Lilim Dec 16, 2022 @ 10:50am

Originally posted by Oaka Lucifer:
...an security issue which is now resolved

Do you know how you compromised your account?

Did you ever use any third party sites for trading or gambling? Did you vote for someones team or did you sign up for a tournament using your login data?

Last edited by Lilim; Dec 16, 2022 @ 10:51am

#10

CRASHOUT KAIZEN Dec 16, 2022 @ 10:54am

Originally posted by Lilim:
Originally posted by Oaka Lucifer:
...an security issue which is now resolved

Do you know how you compromised your account?

copycat steam market for csgo which I believe, it was the 1st time I went on the steam market through the browser on this new computer which was the most unluckiest moment by far on the set up, I use to gamble rust skins on official rusty pot website years ago but those 2 sources are the only source I've ever logged into steam on.

#11

Omen Dec 16, 2022 @ 11:00am

dang, be careful next time, also yeah gyazo does seem safe, stay safe g

#12

Jack Schitt Dec 16, 2022 @ 11:02am

Discord. If you have Discord permissions set to allow it to harvest anything like your online status, whether you're playing a game, linked it to Steam (very bad idea!) that's possibly how the hijacker got your info. Discord is not a safe thing to use.

Steps to fix this and prevent it from happening again:
- Report it to Steam Support.
- Change your Steam Client password
- Run a Virus and Malware scan on your computer
- Revoke any Steam API key's you've registered and allowed: https://steamcommunity.com/dev/apikey
- Stop using Discord.
- Uninstall Discord.
- Delete your Discord account permanently.

Discord Lies about the data and info they collect, they lie about the fact that they do log and store that data, and they lie about what they do with it.

YouTube™ Video: Your Discord Data Package is DANGEROUS! Here's why

Many people are using their Discord data package to learn about their Discord stats. With the increasing popularity of these websites, many people do not understand what data is inside that...

Since that information is collected (some of it's harvested without you knowing just by visiting the Discord website whether you log in and use it or not), logged, and stored on their servers and their servers are not secure anyone that wants that information can get it.

Get off of Discord.
The best form of prevention is avoidance. If you don't want to risk things like this happening don't use networks these things commonly and possibly can come from.

#13

CRASHOUT KAIZEN Dec 16, 2022 @ 11:07am

Originally posted by Jack Schitt:
Discord. If you have Discord permissions set to allow it to harvest anything like your online status, whether you're playing a game, linked it to Steam (very bad idea!) that's possibly how the hijacker got your info. Discord is not a safe thing to use.

Steps to fix this and prevent it from happening again:
- Report it to Steam Support.
- Change your Steam Client password
- Run a Virus and Malware scan on your computer
- Revoke any Steam API key's you've registered and allowed: https://steamcommunity.com/dev/apikey
- Stop using Discord.
- Uninstall Discord.
- Delete your Discord account permanently.

Discord Lies about the data and info they collect, they lie about the fact that they do log and store that data, and they lie about what they do with it.

YouTube™ Video: Your Discord Data Package is DANGEROUS! Here's why

Views: 453,726

Many people are using their Discord data package to learn about their Discord stats. With the increasing popularity of these websites, many people do not understand what data is inside that...

Since that information is collected (some of it's harvested without you knowing just by visiting the Discord website whether you log in and use it or not), logged, and stored on their servers and their servers are not secure anyone that wants that information can get it.

Get off of Discord.
The best form of prevention is avoidance. If you don't want to risk things like this happening don't use networks these things commonly and possibly can come from.