I have been hacked after 10 years

[nU]

Hello everyone. Yesterday my account has been hacked and all my tradable items have dissapeared. I don t know how this is possible, i was at work with my steam online and they somehow logged into my account while i was also logged in. They stole items worth 3-4k euros and traded with multiple accounts. I checked the accounts that my items went to and 90% of those accounts have been banned in the past around the same date. Now the question is, of course, how can i get my items back? i reported every single account that appears in my trading histroy and have an open ticket to steam support, but i was just wondering if someone else's account has been hacked like this. After all this is not right, to spend money (a lot of money) on a game like dota 2 and cs:go and then to be hacked and lose everything because the system is not implemented right. how can someone just do that anyway? why am i not even notified when someone from a different IP is logging into my account? why am i not notified when a HUGE amount of items are being transfered from my account? how tf is this fine? Im pretty sure the support team will say they can t do anything, maybe just ban the scammers, but i lost a HUGE amount of money for literally just deciding to play a game. I did not do anything wrong, and i was pretty careful with everything i did, hence in 10 years of activity i ve never had any problems. some people buy cars with the amount of money that was stolen from my account and i want the items OR money back. If anyone can actually help me please feel free to interact with this post, if u don t have anything other than saying it is for sure my fault that i have been hacked, please move along. Also i would like someone that works at Valve to interact with this post and figure things out because this is gonna end in a court of justice if i don t get my money back. Thank you all very much!

[H4D M4-TT0R]

Random note, I'm currently logged in with two IPs and those can even change at random. That's what the api keys are for, I guess. Of course you could have absolute security but the usability would suffer a lot and in the worst case it could lock you out permanently e.g. like it happened to people that lost the key to their crypto wallet.

Either way the weakest spot in the security would always be me.

[Matt]

In order to login to a Steam account, you need the account name, password, and rotating Steam Guard code that changes every 30 seconds. The Steam Guard code is only generated in the Steam app on your phone. Now explain how someone could obtain those 3 pieces of information, other than by you accidentally giving it away. The thing about phishing and social engineering is that they've perfected their technique to make it such that you can't recall divulging the credentials. One of the more common scenarios (and there are many) is some asking you to "vote for their team." Not sure if that rings a bell or not, but it's a common phishing technique. Do you use Discord? Quite a lot of scams originate thru that platform.

[Unn4m3d (♥AUT♥)]

Publicado originalmente por darklight:

Publicado originalmente por Had Matter:

I can assure you, there is no way to hack a steam account and if there was you'd know about it since it would get the highest possible media coverage. I don't know what went wrong but I doubt you'll be able to prove Valve is at fault. Keep us updated the outcome of the lawsuit.

i will sure do. this is not ending with just another "oh you gave up ur info it s ur fault lesson learned"

It will end with you not doing it because you are one of many who say this.
You don't sue Valve. You don't have the slightest clue about how any of it works.
Let me tell you how it WOULD go, assuming you'd find a lawyer to represent You, which you won't.

Valves lawyers would do everything to keep the lawsuit going as long as possible, and trust me, they know how to do that.
And you know what happens to You? You go broke with the lawyer fees. And then it would be over.

[nU]

Publicado originalmente por Had Matter:

Random note, I'm currently logged in with two IPs and those can even change at random. That's what the api keys are for, I guess. Of course you could have absolute security but the usability would suffer a lot and in the worst case it could lock you out permanently e.g. like it happened to people that lost the key to their crypto wallet.

well losing your key, aka in cases of crypto wallets, then yeah, that would be the customer's mistake for not taking care of a string of words. never had any issues with my crypto wallets because they are actually secure, noone can access it unless they know the seedphrase, while in this case, EVERYONE can access your account if u access some websites lmao. how unprofessional is this it just makes me sick to be blamed for the flaws of this system. u ve not been hacked because u didn t access god knows what website i accessed, YET.

[Phoenix]

Publicado originalmente por darklight:

while in this case, EVERYONE can access your account if u access some websites lmao. how unprofessional is this it just makes me sick to be blamed for the flaws of this system. u ve not been hacked because u didn t access god knows what website i accessed, YET.

Yeah, I don't think misunderstanding what you're being told on purpose is going to help you here. If you give away you log-in credentials to a random site on the internet you are likely compromising your account. How is this surprising?

Also, you having multiple crypto wallets nicely fits into the picture.

[nU]

Publicado originalmente por Matt:

In order to login to a Steam account, you need the account name, password, and rotating Steam Guard code that changes every 30 seconds. The Steam Guard code is only generated in the Steam app on your phone. Now explain how someone could obtain those 3 pieces of information, other than by you accidentally giving it away. The thing about phishing and social engineering is that they've perfected their technique to make it such that you can't recall divulging the credentials. One of the more common scenarios (and there are many) is some asking you to "vote for their team." Not sure if that rings a bell or not, but it's a common phishing technique. Do you use Discord? Quite a lot of scams originate thru that platform.

i don t use discord and i do not recall voting or using my profile information on any websites. it s pretty clear to me right now that this problem occured by accessing probabely some of those sites everyone's talking about. so what if i did lmao? i should be punished for accessing a site? i should lose everything without my consent because someone s spending time creating fake websites and steam just blames the customer for their flaws in the security system? noone really acknowledges there s a BIIIIIIIIIG problem with the security of your accounts and the risk to lose everything u have on it just because you access a website u didn t even realise designed to steal your information? im accessing many sites per day with news and so on so i may have accessed one of those said sites, but now what? it s unreal how this big problem is treated. amazing how much ignorance and hatred people throw towards someone that s got a problem because the security system is not working for the customers.

[nU]

Publicado originalmente por Phoenix:

Publicado originalmente por darklight:

while in this case, EVERYONE can access your account if u access some websites lmao. how unprofessional is this it just makes me sick to be blamed for the flaws of this system. u ve not been hacked because u didn t access god knows what website i accessed, YET.

Yeah, I don't think misunderstanding what you're being told on purpose is going to help you here. If you give away you log-in credentials to a random site on the internet you are likely compromising your account. How is this surprising?

Also, you having multiple crypto wallets nicely fits into the picture.

how does me having multiple crypto hardware wallets fits into this picture? is that also a problem? should i abstain from using crypto cuz my steam account my get hacked? please xDD

[nU]

Publicado originalmente por Unn4m3d (♥AUT♥):

Publicado originalmente por darklight:

i will sure do. this is not ending with just another "oh you gave up ur info it s ur fault lesson learned"

It will end with you not doing it because you are one of many who say this.
You don't sue Valve. You don't have the slightest clue about how any of it works.
Let me tell you how it WOULD go, assuming you'd find a lawyer to represent You, which you won't.

Valves lawyers would do everything to keep the lawsuit going as long as possible, and trust me, they know how to do that.
And you know what happens to You? You go broke with the lawyer fees. And then it would be over.

we ll see about that. please stop reypling to this thread.

[Cathulhu]

You can not command anything what to do or not. This is a public forum and they are allowed to give their opinion.
They are even allowed to disagree with you.

[Phoenix]

Publicado originalmente por darklight:

so what if i did lmao? i should be punished for accessing a site? i should lose everything without my consent because someone s spending time creating fake websites and steam just blames the customer for their flaws in the security system[...]

Wow, you're putting IMAX to shame with your projections.

Yes, if you enter your log-in credentials into a fake website Valve has no control over, that is, indeed, your problem. Just like giving away the keys to your "crypto wallets" would be. This is literally in the SSA:

You are responsible for the confidentiality of your login and password and for the security of your computer system. Valve is not responsible for the use of your password and Account or for all of the communication and activity on Steam that results from use of your login name and password by you, or by any person to whom you may have intentionally or by negligence disclosed your login and/or password in violation of this confidentiality provision. Unless it results from Valve’s negligence or fault, Valve is not responsible for the use of your Account by a person who fraudulently used your login and password without your permission.

Valve - or any contract or business partner really - can not be held responsible for you being negligent.

Yes, please go on and sue Valve for losing imaginary money investing in imaginary items by doing something Valve has no control over and compromising your own account

[Cathulhu]

If that ever reaches any court, Valve is going to have a field day.

[[N]ebsun]

Publicado originalmente por Cathulhu:

Those phishing websites are usually easy to recognize due to their bad design and obvious glaring issues like every link leading to a login and other stuff.
Or faking popups that look horrible and can't be dragged outside the window, if it can be moved at all.

So many tells and not once you got suspicious?

To be honest, some of the phishing site I have seen recently almost perfectly replicate the Steam login page - to the point where even though I know it is a phishing site, I could not tell the difference without looking very very closely.

[Cathulhu]

I'd love to see some examples. If you have one or more, feel free to post them as a comment on my profile page, so it's not as public as posting in the forums.
I will of course remove the comment after i copied the links.

[м]

Publicado originalmente por darklight:

. it s pretty clear to me right now that this problem occured by accessing probabely some of those sites everyone's talking about. so what if i did lmao?

Well, you clearly did.
And that's why i said it's your own fault.

If you give someone the key to your house and get robbed, it's also your fault.
Even if you don't wanna hear that.

Publicado originalmente por darklight:

lmao

[nU]

it s so easy to blame the guy that lost everything on his account because he s not 100% focused all the time when surfing the internet being careful cuz surprise surprise u might lose ur account: big or small account. it s easier to say it s ur customer s fault for this type of things instead of actually doing something to help prevent these kind of situations. u all smartasses can bark all day long until it will eventually happen to all of you. people are spending time to develop new techniques of hacking into ppl's accounts and ur system is obviously outdated and flawed. u can accept that and do something about it or u can reject that possibility and u ll have thousands of other posts like this one. most of you that answered to this thread are probabely somehow affiliated with steam and are paid to throw the guilt at the victims instead of actually helping. disgusting thing