My Steam Account Was Hijacked, and I Need Help Understanding How!

[Speedy]

So, here's the situation: Someone hijacked my Steam account, bought skins using my wallet, and then a day later took over my LinkedIn account, changing all my personal info. The weird part is, I wasn’t notified by Steam Guard, even though I have it enabled. When I contacted Steam support, they told me there was activity from Europe on December 21, but I live in North Africa and was at work that whole week, so it wasn’t me.

How could this happen? How did they get access to both accounts and bypass my security? I'm really confused and need some advice. Has anyone experienced something like this before?

Thanks!

Also i did all the steps and cleaned all my pc and did what people on the community advised me to do, thanks allot guys

[eram]

https://steamcommunity.com/discussions/forum/0/595140603083235071/#c595140603083235392

[J4MESOX4D]

If your LinkedIn was compromised also then your PC is likely riddled with malware. You're part of several scam groups too so I'm sure you've been giving away your credentials to 3rd party sites also. Do these steps to secure your account and device going foward:-

1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

[Speedy]

J4MESOX4D původně napsal:

If your LinkedIn was compromised also then your PC is likely riddled with malware. You're part of several scam groups too so I'm sure you've been giving away your credentials to 3rd party sites also. Do these steps to secure your account and device going foward:-

1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

Thanks allot friend, question please, when you say 3rd party sites, you mean like when we enter a certain app, it asks for our permission to login via gogle, and we give it perm , thats what you mean ?

[J4MESOX4D]

Speedy původně napsal:

J4MESOX4D původně napsal:

If your LinkedIn was compromised also then your PC is likely riddled with malware. You're part of several scam groups too so I'm sure you've been giving away your credentials to 3rd party sites also. Do these steps to secure your account and device going foward:-

1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

Thanks allot friend, question please, when you say 3rd party sites, you mean like when we enter a certain app, it asks for our permission to login via gogle, and we give it perm , thats what you mean ?

Basically 3rd party sites associated with Steam which are trading/gambling/voting whereby you are required to enter your credentials. This is where they can be phished. Also be wearing of even things like mods. It may be impossible to say how you were compromised but secure your account and device and be vigilant going forward when you are downloading and where credentials are entered into.

[Kblocks]

you need to subscribe to a decent antivirus. bitdefender on my end

[Speedy]

Kblocks původně napsal:

you need to subscribe to a decent antivirus. bitdefender on my end

will do , thank you

[RPG Gamer Man]

Change your email password also. But ONLY do this once you confirm your pc is safe.

[Heraclius Caesar]

Speedy původně napsal:

My Steam Account Was Hijacked, and I Need Help Understanding How!

I mean, it's a pretty open & shut case of you naively giving your login information away to shady scammer sites because you thought you'd get something out of it. How'd that work out for you? Did you get some good skins?

A user here has even helpfully pointed out that you're a member of multiple shady scammer groups right here on Steam.

Lol.

Btw man, just sayin, common sense is entirely free and costs nothing to have and to use.

[RPG Gamer Man]

They also should take a cyber security free course. They teach this course at local libraries or govenment institutions alot of times for free. I suggest OP should learn from one of these courses to teach themself about common things to look out for from being phished.

[RPG Gamer Man]

Heraclius Caesar původně napsal:

Speedy původně napsal:

My Steam Account Was Hijacked, and I Need Help Understanding How!

I mean, it's a pretty open & shut case of you naively giving your login information away to shady scammer sites because you thought you'd get something out of it. How'd that work out for you? Did you get some good skins?

A user here has even helpfully pointed out that you're a member of multiple shady scammer groups right here on Steam.

Lol.

Btw man, just sayin, common sense is entirely free and costs nothing to have and to use.

Not everyone has the same level of common sense. That is why OP should take a Cyber Security class. It would help him and explain what happened to him on steam and why he got phished. This will help OP understand what happened to them. That is what their post says, so they should definetly take a free cyber security class.

[Speedy]

Heraclius Caesar původně napsal:

Speedy původně napsal:

My Steam Account Was Hijacked, and I Need Help Understanding How!

I mean, it's a pretty open & shut case of you naively giving your login information away to shady scammer sites because you thought you'd get something out of it. How'd that work out for you? Did you get some good skins?

A user here has even helpfully pointed out that you're a member of multiple shady scammer groups right here on Steam.

Lol.

Btw man, just sayin, common sense is entirely free and costs nothing to have and to use.

you are rude, i wasnt in no ♥♥♥♥♥♥♥♥♥♥ site, also you are rude and i don't like your attitude , i came here asking for help not to be faced somone misreable behind a keyboard like yourself, you must be misreable to treat ppl like this

[Speedy]

RPG Gamer Man původně napsal:

Heraclius Caesar původně napsal:

I mean, it's a pretty open & shut case of you naively giving your login information away to shady scammer sites because you thought you'd get something out of it. How'd that work out for you? Did you get some good skins?

A user here has even helpfully pointed out that you're a member of multiple shady scammer groups right here on Steam.

Lol.

Btw man, just sayin, common sense is entirely free and costs nothing to have and to use.

Not everyone has the same level of common sense. That is why OP should take a Cyber Security class. It would help him and explain what happened to him on steam and why he got phished. This will help OP understand what happened to them. That is what their post says, so they should definetly take a free cyber security class.

that is the whole point of this post, but this guy is accusing me of stuff and saying rude things

[RPG Gamer Man]

Speedy původně napsal:

RPG Gamer Man původně napsal:

Not everyone has the same level of common sense. That is why OP should take a Cyber Security class. It would help him and explain what happened to him on steam and why he got phished. This will help OP understand what happened to them. That is what their post says, so they should definetly take a free cyber security class.

that is the whole point of this post, but this guy is accusing me of stuff and saying rude things

I suggest just ignoring them. There probably tired of reading so many of these posts on the help forum and probably burnt out about it.

[🅷🅴🆇🅴🅽]

Let's be real.

While you're sitting there wringing your hands, blaming Steam Guard for not notifying you, you missed the most obvious solution: what were you doing to protect your accounts outside of Steam Guard? How many of your other accounts have 2FA enabled? Was your email account secured with a strong, unique password and 2FA? If your email was compromised first, the "hacker" could have easily triggered a password reset for your other accounts, including Steam and LinkedIn.

But no, let's just blame Steam Guard because it didn't give you a little pop-up notification.

Valve owes you, right?

Steam Support isn't some personal techie, and they're not there to hold anyones hands through every little breach. They're going to give you the same standard response they give everyone: "Change your password and enable 2FA." But you already knew that, didn't you? It's not like you're totally unaware of the basics of digital security ...

Welcome to the reality of online security. It's not pretty.

So what did we learn here?

Absolutely nothing surprising. You thought you were safe, but you weren't. Steam Guard alone isn't enough. You weren't diligent enough to secure your email, probably reused passwords, and didn't think to lock down other parts of your digital life. Now you're left confused, like someone who just realized that clicking the "agree" button without reading the terms and conditions might have consequences.

Next time, maybe try securing your life with more than just the basics.

You'll be fine, as long as you remember to put in a little effort next time. Or not. Your call.

[Heraclius Caesar]

Speedy původně napsal:

Heraclius Caesar původně napsal:

I mean, it's a pretty open & shut case of you naively giving your login information away to shady scammer sites because you thought you'd get something out of it. How'd that work out for you? Did you get some good skins?

A user here has even helpfully pointed out that you're a member of multiple shady scammer groups right here on Steam.

Lol.

Btw man, just sayin, common sense is entirely free and costs nothing to have and to use.

you are rude, i wasnt in no ♥♥♥♥♥♥♥♥♥♥ site, also you are rude and i don't like your attitude , i came here asking for help not to be faced somone misreable behind a keyboard like yourself, you must be misreable to treat ppl like this

Whether you like it or not, everything I said is the truth.

You gave your login information away to a scammer. You most likely were duped into going to a skins site or whatever it was you fell for where you were presented with what looked like a Steam login page, and it was there that you gave them your login information.

Frankly, a quick Google search or even a search here on the Steam forums could have shown you this. You're far from the first user to fall for it and unfortunately you definitely won't be the last. There are at least a couple posts just like yours everyday.

Whatever you think about me on a personal level is entirely irrelevant to the facts. You let yourself get scammed. It was entirely avoidable.