EVERYTHING GONE! WHAT JUST HAPPENED. HACKERS!

[ASHIAN]

What just even happened, idk i woke up and i saw my email is been spammed with 100s of email form steam market purchasing and selling, all the email are in Chinese while i use English everywhere i was all shocked about it, as soon as i saw it i opened steam. my steam was also in Chinese, i tried to change the language it went to English, and then i saw, all the cards, emoticons, wall papers, whatever there is marketable, has been sold, all the money collected into the steam wallet, then in the end is used to buy some very cheap dota items in very high price to transfer all the money i had before in my steam Wallet

All the money the guy got after selling all my stuff went to his wallet as he made the account buy the cheap items in very high price, i have steam authentication, running, i don't see any email to say there is a login which is needed, on my email, just all the email are about market purchase, i do have contacted steam a some hours ago but no reply, i checked my email , all their location deceives nothing is suspicious there,

so how does anyone can get access without any codes, or anything into my account? while there is not even a single email about a new location login or anything to the email? as this is just sad because all the cards and things i collected for past 6 years in the inventory is all gone, games are still there.

my main point is how the heck whoever was it got the access? i changed password already even email, but idk how will i even be sure that they dont have access? even if i did those as even before my security was at fullest lol

[❤ Sly Succubus ❤]

Perishes have several means to get in, someone will have the steps to follow to avoid it next time but honestly at this stage I'm slowly questioning if Perishes have found a new way to get access that most are unaware of yet.

[WhitePhantom]

Copying and pasting this for you. Follow the steps below to properly secure your account before you do anything else.

Steps to take NOW to secure the account:
1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

Most likely you signed up for a trading site outside of Steam, or you followed a phishing link giving someone full access to your account.

[ASHIAN]

Originally posted by WhitePhantom:

Copying and pasting this for you. Follow the steps below to properly secure your account before you do anything else.

Steps to take NOW to secure the account:
1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

Most likely you signed up for a trading site outside of Steam, or you followed a phishing link giving someone full access to your account.

i have did all those now, but i have not clicked or sighed up on any trading game, as all the games i play have no trading in those, all the security was at max. but yet! damn.

[ASHIAN]

Originally posted by Shizune:

Perishes have several means to get in, someone will have the steps to follow to avoid it next time but honestly at this stage I'm slowly questioning if Perishes have found a new way to get access that most are unaware of yet.

for sure there's a new way as i feel, i am very cautious always not to get anything hacked by clicking links or installing/downlording anything.

[Jamie]

do you have the two factor authentication set up? that sends u the 6 letter code when u log in?

[Bee🐝]

Originally posted by Shizune:

Perishes have several means to get in, someone will have the steps to follow to avoid it next time but honestly at this stage I'm slowly questioning if Perishes have found a new way to get access that most are unaware of yet.

Don’t spread misinformation.

Steam wasn’t hacked. In quite a few countries Valve is legally required to report all leaks of users information.

People just sign into dummy Steam login pages without checking the URL and assume scam sites sent them to a legit login page.

Also, people tend to not know that hijackers can wait months before lifting an account to remove suspicion. OP has most likely been shadow hijacked for ages.

Popular scam sites are also advertised by popular streamers, YouTubers and influencers, who knowing sell their fans down the river, so that they can have a payday.

[spasti696969]

I've never had a problem like this. Just quit doing all that bitcoin dark web piracy nonsense or whatever.

[ASHIAN]

Originally posted by The Gent:

do you have the two factor authentication set up? that sends u the 6 letter code when u log in?

yes i have it set up from years. was always using it.

[Ari]

Originally posted by ASHIAN:

Originally posted by The Gent:

do you have the two factor authentication set up? that sends u the 6 letter code when u log in?

yes i have it set up from years. was always using it.

If you have 2FA on, then you weren't hacked. "Hacked" is a grossly misused term. Let me guess. Did you sign into a website using your Steam credentials? A site other than Steam itself, of course. If you did, that's how they got access. You're not supposed to sign in using your Steam info anywhere other than Steam.

[D1rtyWorkz]

I have had the same thing yesterday (17-3-23), butt im sure i have never logged my steam account somewhere else other than steam itself in my computer. Also a few weeks back someone was trying to steal my Escape From Tarkov account, was getting emails with new hardware found but my pc was off and i was not at home.

I dont care about the cards but they stole a whole €0.60 worth of cards from me.
Still kinda scary someone is on your accounts....

[ASHIAN]

Originally posted by 󠀡Ari:

Originally posted by ASHIAN:

yes i have it set up from years. was always using it.

If you have 2FA on, then you weren't hacked. "Hacked" is a grossly misused term. Let me guess. Did you sign into a website using your Steam credentials? A site other than Steam itself, of course. If you did, that's how they got access. You're not supposed to sign in using your Steam info anywhere other than Steam.

i did not have logged anywhere with steam the most far i can remember is to link my hogwarts account with the WB account for hogwarts legacy, that's it

[ASHIAN]

Originally posted by D1rtyWorkz:

I have had the same thing yesterday (17-3-23), butt im sure i have never logged my steam account somewhere else other than steam itself in my computer. Also a few weeks back someone was trying to steal my Escape From Tarkov account, was getting emails with new hardware found but my pc was off and i was not at home.

I dont care about the cards but they stole a whole €0.60 worth of cards from me.
Still kinda scary someone is on your accounts....

same i didnt log in anywhere still i dont know how this even happened as in my case i had 100s of cards which were lost so pretty bad but guess its all gone and no one can do a thing about it.

[J4MESOX4D]

Originally posted by D1rtyWorkz:

I have had the same thing yesterday (17-3-23), butt im sure i have never logged my steam account somewhere else other than steam itself in my computer. Also a few weeks back someone was trying to steal my Escape From Tarkov account, was getting emails with new hardware found but my pc was off and i was not at home.

I dont care about the cards but they stole a whole €0.60 worth of cards from me.
Still kinda scary someone is on your accounts....

If someone is getting into your accounts then you clearly have some harmful malware embedded on your device.

[J4MESOX4D]

Originally posted by ASHIAN:

Originally posted by D1rtyWorkz:

I have had the same thing yesterday (17-3-23), butt im sure i have never logged my steam account somewhere else other than steam itself in my computer. Also a few weeks back someone was trying to steal my Escape From Tarkov account, was getting emails with new hardware found but my pc was off and i was not at home.

I dont care about the cards but they stole a whole €0.60 worth of cards from me.
Still kinda scary someone is on your accounts....

same i didnt log in anywhere still i dont know how this even happened as in my case i had 100s of cards which were lost so pretty bad but guess its all gone and no one can do a thing about it.

Somewhere along the lines you allowed your credential set to be phished or captured with tailored malware. It's that simple. Either this happened recently or previous and the hijackers who have been sitting on your account decided to strike at this specific time. This makes the payoff better and it harder to determine the source. Either way, the leak is stemming from your end or a device your account has used.