MY ITEMS WE'RE SOLD

[barqs ツ]

I don't understand I've had my steam acc for almost 10 years now and this has never happened to me and I have my mobile steam guard and authenticator on since it started. so I went to login to steam yesterday and I see my csgo Items sold and all my dota 2 immortals sold that we're worth almost $70 and it's not like I got the money for them the person/hacker had bought very cheap Items for a big price so for example a 14 cent item for $14 that's ♥♥♥♥♥♥ up. I don't know what to do or if steam support can even help me but why didn't I get an alert for what happened from an unrecognized device or something this is ♥♥♥♥♥♥ up

[Leonardo Da Pinchi]

Lotta 3rd party trade groups you're in, willing to bet one of those are the culprit.

[Boblin the Goblin]

Account security is your responsibility. Steam will not reimburse you or give you the items back.

Looking through your groups, you are part of many trade groups that lead to 3rd party sites. Your account was most likely hijacked from using one of those sites.

This is why Valve heavily discourages the use of 3rd party sites for trading items.

[barqs ツ]

Originally posted by SlowMango:

Account security is your responsibility. Steam will not reimburse you or give you the items back.

Looking through your groups, you are part of many trade groups that lead to 3rd party sites. Your account was most likely hijacked from using one of those sites.

This is why Valve heavily discourages the use of 3rd party sites for trading items.

I just left all the groups but these groups I've been in for years and how come all of a sudden this happened.

[barqs ツ]

Originally posted by Leonardo Da Pinchi:

Lotta 3rd party trade groups you're in, willing to bet one of those are the culprit.

is there a way I can find third site party websites that I've had steam connected to over the years that I can just remove?

[J4MESOX4D]

Originally posted by Barqs 🌙:

Originally posted by SlowMango:

Account security is your responsibility. Steam will not reimburse you or give you the items back.

Looking through your groups, you are part of many trade groups that lead to 3rd party sites. Your account was most likely hijacked from using one of those sites.

This is why Valve heavily discourages the use of 3rd party sites for trading items.

I just left all the groups but these groups I've been in for years and how come all of a sudden this happened.

How many 3rd party sites you logged into recently and the past? Somewhere along the lines your credentials have been phished. Scammers can sit idle on shadow-hijacked accounts for as long as they wish and only strike when there's a payoff to be had.

[Boblin the Goblin]

Originally posted by Barqs 🌙:

Originally posted by SlowMango:

Account security is your responsibility. Steam will not reimburse you or give you the items back.

Looking through your groups, you are part of many trade groups that lead to 3rd party sites. Your account was most likely hijacked from using one of those sites.

This is why Valve heavily discourages the use of 3rd party sites for trading items.

I just left all the groups but these groups I've been in for years and how come all of a sudden this happened.

Account hijackers will sit on accounts for months or even years until they feel it's good enough to jump in, sell everything, jump out.

There is no way to determine what site hijacked your account without actively monitoring your account access as the hijacking happened(which a VPN can cover the real person regardless) or some deep cyber forensic knowledge and skill.

[barqs ツ]

Originally posted by J4MESOX4D:

Originally posted by Barqs 🌙:

I just left all the groups but these groups I've been in for years and how come all of a sudden this happened.

How many 3rd party sites you logged into recently and the past? Somewhere along the lines your credentials have been phished. Scammers can sit idle on shadow-hijacked accounts for as long as they wish and only strike when there's a payoff to be had.

I logged into bitskins a few days ago and cs.money but I only used cs.money for a trade that went successful.

[barqs ツ]

Originally posted by SlowMango:

Originally posted by Barqs 🌙:

I just left all the groups but these groups I've been in for years and how come all of a sudden this happened.

Account hijackers will sit on accounts for months or even years until they feel it's good enough to jump in, sell everything, jump out.

There is no way to determine what site hijacked your account without actively monitoring your account access as the hijacking happened(which a VPN can cover the real person regardless) or some deep cyber forensic knowledge and skill.

So no matter what securities you have on your account they can still manage to hijack it?
okay can they hijack it again? see how am I supposed to trust my account now if I want to buy something I know it's best to wait but now I feel like my account is being watched

[J4MESOX4D]

Originally posted by Barqs 🌙:

Originally posted by J4MESOX4D:

How many 3rd party sites you logged into recently and the past? Somewhere along the lines your credentials have been phished. Scammers can sit idle on shadow-hijacked accounts for as long as they wish and only strike when there's a payoff to be had.

I logged into bitskins a few days ago and cs.money but I only used cs.money for a trade that went successful.

Well one of those (likely the latter) is the culprit assuming that you weren't already hijacked. Logging into these sites could've put idle-sitting scammers on alert which is why they acted ASAP rather than let other scammers get in there.

You should do these steps in order and without fail to secure your account going forward:-

Scan for Malware/virus https://www.malwarebytes.com/mwb-download/
Deauthorize all devices https://store.steampowered.com/twofactor/manage
Change your Account password on a secure device
Generate new back up codes https://store.steampowered.com/twofactor/manage
Revoke the API key https://steamcommunity.com/dev/apikey

All this will be pointless if you keep using 3rd party sites though.

[J4MESOX4D]

Originally posted by Barqs 🌙:

Originally posted by SlowMango:

Account hijackers will sit on accounts for months or even years until they feel it's good enough to jump in, sell everything, jump out.

There is no way to determine what site hijacked your account without actively monitoring your account access as the hijacking happened(which a VPN can cover the real person regardless) or some deep cyber forensic knowledge and skill.

So no matter what securities you have on your account they can still manage to hijack it?
okay can they hijack it again? see how am I supposed to trust my account now if I want to buy something I know it's best to wait but now I feel like my account is being watched

Of course. If I give away my front door keys to a thief, I can't act all astonished if I find my house burgled.

[barqs ツ]

Originally posted by J4MESOX4D:

Originally posted by Barqs 🌙:

I logged into bitskins a few days ago and cs.money but I only used cs.money for a trade that went successful.

Well one of those (likely the latter) is the culprit assuming that you weren't already hijacked. Logging into these sites could've put idle-sitting scammers on alert which is why they acted ASAP rather than let other scammers get in there.

You should do these steps in order and without fail to secure your account going forward:-

Scan for Malware/virus https://www.malwarebytes.com/mwb-download/
Deauthorize all devices https://store.steampowered.com/twofactor/manage
Change your Account password on a secure device
Generate new back up codes https://store.steampowered.com/twofactor/manage
Revoke the API key https://steamcommunity.com/dev/apikey

All this will be pointless if you keep using 3rd party sites though.

I have done these. so going forward if I don't log in to any of those third party sites after I did all these steps than I should be fine right?

Thank you,

[J4MESOX4D]

Originally posted by Barqs 🌙:

Originally posted by J4MESOX4D:

Well one of those (likely the latter) is the culprit assuming that you weren't already hijacked. Logging into these sites could've put idle-sitting scammers on alert which is why they acted ASAP rather than let other scammers get in there.

You should do these steps in order and without fail to secure your account going forward:-

Scan for Malware/virus https://www.malwarebytes.com/mwb-download/
Deauthorize all devices https://store.steampowered.com/twofactor/manage
Change your Account password on a secure device
Generate new back up codes https://store.steampowered.com/twofactor/manage
Revoke the API key https://steamcommunity.com/dev/apikey

All this will be pointless if you keep using 3rd party sites though.

I have done these. so going forward if I don't log in to any of those third party sites after I did all these steps than I should be fine right?

Thank you,

Yep, these crucial steps will kick out any hijackers sitting idle monitoring your account so you will be safe as long as you don't do anything reckless.

[Add Hell]

I got the same yesterday I tried to download wallpeper from wallpeper engine workshop and for that I copied a link from a wallpeper in the workshop and tried to download it in a scam site its steamworkshop.download (DONT GO THERE) I only give this site so if someone with good skills can tell me what kind of magic they used to get all my inventory (I lost 19e of csgo case so didint lose much) and if there s a virus I need to get rid of but i think from what someone said to me (in the thread i made) they probably used API to do it they only used the market selling everything bypassing steam guard but when I try to sell something steam guard ask me to confirm i didnt receive any notification from all their trade of course and i didnt find anything in my API so I think they did what they want to then erased all trace.

So if someone can tell me if there s a virus in this site thank you and sorry for my poor english.

[barqs ツ]

Originally posted by Add Hell:

I got the same yesterday I tried to download wallpeper from wallpeper engine workshop and for that I copied a link from a wallpeper in the workshop and tried to download it in a scam site its steamworkshop.download (DONT GO THERE) I only give this site so if someone with good skills can tell me what kind of magic they used to get all my inventory (I lost 19e of csgo case so didint lose much) and if there s a virus I need to get rid of but i think from what someone said to me (in the thread i made) they probably used API to do it they only used the market selling everything bypassing steam guard but when I try to sell something steam guard ask me to confirm i didnt receive any notification from all their trade of course and i didnt find anything in my API so I think they did what they want to then erased all trace.

So if someone can tell me if there s a virus in this site thank you and sorry for my poor english.

do these steps what my friend J4MESOX4D posted

Well one of those (likely the latter) is the culprit assuming that you weren't already hijacked. Logging into these sites could've put idle-sitting scammers on alert which is why they acted ASAP rather than let other scammers get in there.

You should do these steps in order and without fail to secure your account going forward:-

Scan for Malware/virus https://www.malwarebytes.com/mwb-download/
Deauthorize all devices https://store.steampowered.com/twofactor/manage
Change your Account password on a secure device
Generate new back up codes https://store.steampowered.com/twofactor/manage
Revoke the API key https://steamcommunity.com/dev/apikey

All this will be pointless if you keep using 3rd party sites though.

[Maria]

Originally posted by Add Hell:

tried to download it in a scam site its steamworkshop.download (DONT GO THERE) I only give this site so if someone with good skills can tell me what kind of magic they used to get all my inventory.

Idk about that wallpaper site but you have many 3rd party trading sites on your past names