Russian hacker remote controlling my Steam platform?

[Remus Shepherd]

While I was away from my PC for about an hour, a user named "Neil✔" messaged me in Russian. He then got a response from me, also in Russian. Google translate says that the conversation is "the email is" and "where?". This guy then somehow got my account to friend him.

I've scanned my PC for viruses and it appears clean. I'm now changing my password.

Can anyone tell me what just happened, what other evil things he may have done that I should look for, what I can do to protect myself, and how do I get Steam to deal with this hacker?

[Ronnie Pickering]

you got bamboozled homie

[Cassidy]

Do you use Steam mobile authenticator? If you do, then he cannot log in to your account without the Steam Guard code from your phone.

If you have items in your inventory, check that they are still there.

Account Security Recommendations
https://support.steampowered.com/kb_article.php?ref=1266-OAFV-8478&l=english

Even if a scan turns up nothing, when changing your password, always try to change it on a device that you know for certain is clean (i.e. you had no such problems on it).

[Remus Shepherd]

I just signed up for mobile authenticator, although I *hate* having to put this stupid app on my phone. I then changed my password, using the authenticator code.

I've also found another person with a Russian name who made my account remote-add him as a friend.

I couldn't care less about the inventory items; I never use or even look at that stuff anyway. I just want my account to be secure, and I damn well don't want the Steam platform to serve as a backdoor into remote-controlling my PC!

[cinedine]

You don't have a virus, you have malware. A RAT - remote access tool - to be specific. Run an antimalware check, those are different to antivirus checks.
Also check your running services so you don't ahve teamviewer or something similar running.

Also check the profiles in question to make sure it's not just some "friends" trying to be funny.

[Remus Shepherd]

I'll check for those things, thanks. My antivirus is ZoneAlarm, which should find malware, but I'll look for other options. I have no friends who speak Russian.

My concern is whether Steam is acting as malware by providing a backdoor into PCs.

[cinedine]

Steam is not. Else you wouldn't notice it. You are utterly unimportant and not worth the time if there are more valuable profiles to pifler and pester while the exploit is still open.

It's likely something else you have downloaded. Cracks, hacks, non-workshop mods, infected "patches" for gaming related software (like Teamspeak or Discord).

[Washell]

Messaggio originale di Remus Shepherd:

My concern is whether Steam is acting as malware by providing a backdoor into PCs.

All software contains bugs that can be abused but most of the times it's Windows, your browser, or you that's the "malware" when it comes to a Steam account being compromised.

[Remus Shepherd]

I have no cracks, no hacks, no mods, and I've only ever patched through Steam. I have no gaming-related software unless you count Gamemaker Studio, also downloaded through Steam. I try to keep a clean PC. I can't remember the last thing I downloaded that didn't come from either Steam or Google.

As an addendum, my Steam friends list appears to have been wiped out, completely empty.

I'm certain that this is a Steam security flaw, not a hack from any other program. I'd like some reassurance from Steam that they're looking into this.

[Washell]

Make a clean boot disk/usb with an AV/anti malware tool on a different PC and boot from that to scan your PC.

Messaggio originale di Remus Shepherd:

I'm certain that this is a Steam security flaw, not a hack from any other program. I'd like some reassurance from Steam that they're looking into this.

If it is, these forums are about to explode into similar threads. If it stays business as usual, you really have to accept and start looking for issues local to you.

[truxtonet]

Try to use Windows restore points. It should work efficiently.

[truxtonet]

I remember I had a RAT Comet or something of the sort, it solved the issue for me. I hope it does for you too.

[truxtonet]

Use MalwareBytes after using a restore point. Check if there's any other threats/backdoors/whatever. If it finds any other registeries, look up on the internet for their removal ASAP.

[Remus Shepherd]

Just an addendum, I used MalwareBytes and it found nothing (although it doesn't like some components of ZoneAlarm). My PC appears clean.

[truxtonet]

Well your best bet is restore point IMO.

[Washell]

Messaggio originale di Remus Shepherd:

Just an addendum, I used MalwareBytes

From a clean boot device? Results from scans that were ran on the possibly affected PC are meaningless.