Logged in this morning - gifts and random people

[Wuulfe]

I just booted up my computer this morning. Saw I had 6-7 emails from steam and each of them were that I gifted some random people I have no clue who they are a gift each (don't starve together, Landmark - Trailblazer Buddy Gift, Half-Life 2, State of Decay) to these people today.
Its listen in my gifting history and on the emails.

But I never sent out anything to anyone and I have no idea who these people are. Not only that, there was a friend invite to them I never did... I cancelled that.. but what the actual hell?

[d3str0y3r]

Your account is compromised.

Steps to take NOW to secure the account:
1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

[Wuulfe]

I already did those. First thing I googled up.. but yeah I still have the games in my library.. checked my bank and didn't look like any money's come out. Yet its clearly been gifted in my gift history.

[SLG]

You can not gift a game from your library? Do you mean gift a game purchased from the store?

[Wuulfe]

tbh i'm not sure what's going on... but its basically saying that I've gifted around 6-7 items to random people i have no clue who they are.... email confirmation they redeemed and in my gift history - which I never sent out.

[SLG]

Ok, items are not games. It more likely items from your inventory.

Could you post a screenshot of your gift history?

[Wuulfe]

https://paste.pics/f9983a516ccb3b12507db6e5d830d59b

https://paste.pics/68333887adc9179004e7c3511915f9d9

[SLG]

What was your wallet value before yesterday, and what is it now?

Exactly what does your purchase history show for yesterday and today?

[Wuulfe]

well my wallet's at $0 now.. I'm sure I had around $5 on it or a little over... so that's wiped.. tho going through history the last thing I purchased was a game.. mighta taken it out of that. But otherwise its showing no sales/give aways.. yet the gift history part does as well as the emails I was sent from the offical steam (first thing i checked for was a dud email address).

[SLG]

Have you contacted Steam support?

If you have lost something, you will not get it back. They might can tell you if exactly what you are seeing is real.

[Wuulfe]

i've submitted a ticket this morning (about 7-10 hours ago) haven't heard anything back yet.

[Phénomènes Mystiques]

Many times I think these types of posts are trolls looking for attention and not really in need of help or even doing anything to "solve their issue(s)" but that's just my thoughts.

[Wuulfe]

I wrote the post up wondering if anyone else has had it happen or know of it happening. I thought initially it was trading cards stolen from me. Rereading it though, I think it was actual games.
I’ve blocked my credit card since nothings been removed from my bank account yet.
But I feel vulnerable especially since they gained access to my account.
I had a response from steam support - but they’re like. It was done through the community market and yes my account was compromised - but there’s nothing thru can do about it.

To top that off they were also like, use steam guard and two step authorization for added security…

And I’m like…. It was already activated and my account was still compromised so - the steam guard clearly didn’t work. So if that’s the go to and that failed…. I have no faith in their security

[Phénomènes Mystiques]

Originally posted by Wuulfe:

I wrote the post up wondering if anyone else has had it happen or know of it happening. I thought initially it was trading cards stolen from me. Rereading it though, I think it was actual games.
I’ve blocked my credit card since nothings been removed from my bank account yet.
But I feel vulnerable especially since they gained access to my account.
I had a response from steam support - but they’re like. It was done through the community market and yes my account was compromised - but there’s nothing thru can do about it.

To top that off they were also like, use steam guard and two step authorization for added security…

And I’m like…. It was already activated and my account was still compromised so - the steam guard clearly didn’t work. So if that’s the go to and that failed…. I have no faith in their security

The security is you and not going to weirdo websites that ask for a Steam login when you are already logged in through the API - it is a known scam for the past 15 years.

[Wuulfe]

I’ve only used the steam iPhone app and the steam client. I don’t log in thru chrome or edge or any of that crap

[Phénomènes Mystiques]

Originally posted by Wuulfe:

I’ve only used the steam iPhone app and the steam client. I don’t log in thru chrome or edge or any of that crap

I have had some people send me links in the chat to "Vote for their team on CSGO" or "$50 Steam gift card giveaway", ever get one of these messages (or similar) from Steam chat friends list linking to a weird URL, or any URL for that matter (ex.: stemacommunity)?