Steam account got hijacked since Steam security system sucks

[Frairis]

Solved, it seems steam clubs can leak your info too...

[Vamp]

Steam can not protect you when you decide to be careless with your account credentials.
its like saying you got triple locks on your home and then you leave your home key with address on it at the local criminal bar.

[Runkel]

Originally posted by NoName:

Since its Steam side security problem they are responsible for this....

Steams security system has exactly the same Weakpoint every system has, the user.
No security system can protect you if you are careless with your account.
Also, Game Bans have absolutely nothing to do with VAC or this Forum.

[J4MESOX4D]

Steam's security is fine. It's not Valve's fault you allowed your credentials to be phished and account hijacked.

[NemesisChaingunner]

If you got banned in rust its not even related to VAC, Rust uses easy anticheat and gives hardware ID bans meaning every account you attempt to make on rust on your current pc will be subsequently banned one after the other. Forget the game or buy a new pc and secure your account better next time. Not the place to discuss game bans.

[76561198407601200]

Originally posted by NoName:

Hey, just found out that my account was hijacked even then I was using 3 way auth. security someone managed to login into my steam account and play game Rust with I assume cheats...
Problem is that steam app or steam email auth. wasn't reached that means Steam security system is one big ♥♥♥♥♥♥♥♥... so why me as account owner have to be responsible for steam security flaws and sit with VAC?

I wont even be mad if I was at least informed about new login or something like that... but then you come back after 1 week home and find out that your steam was used by someone and steam didn't even notified me about new logins or account usage (then I try to login with my personal pc I get notifications from app and email)

Since its Steam side security problem they are responsible for this....

https://steamcommunity.com/discussions/forum/10/4343240135702079714/#c4343240316586927355

[cats187]

Oofff 16 year badge and game ban. That will engraved into that profile forever.. since game bans dont dissapear for the public like vac bans do after 7 years. Feels bad man , that really doesnt look good. Unless you dont mind the red text, id just make a new account if you want to play your game again, i know its tough with an acc that old ...

[Frairis]

Wow thnx for no crap given asnwers.... And no im not careless about my steam credentials.
used only one system +3 way security that wasnt even alerted after someone loged into my account. But ofc its my foult that someone can access my account without me even knowing thanks steam and evryone who defends steam trash security system.
Its always great to be troll and have fun of people in this kind of situation but then you will be victim of this kind of crap you will understand what this means...

Originally posted by NemesisChaingunner:

If you got banned in rust its not even related to VAC, Rust uses easy anticheat and gives hardware ID bans meaning every account you attempt to make on rust on your current pc will be subsequently banned one after the other. Forget the game or buy a new pc and secure your account better next time. Not the place to discuss game bans.

Tryed to login in same server that my account was baned and you know what? after playing 2 hours nothing happened.....

Well anyway thats how it works noone gives a crap if some trash head steals from you and security wont even try to check a damn system ID or even simple IP... 3 factor security is ussles since you wont get alerted of new login and there are a way to bypass auth. codes...

[N3tRunn3r]

If you give away your keys for free to scammer and hijacker, to CRiMiNALS, it is your own fault in missing responsibility to your security concepts !!

Usually begins at Discord, or at any other "suspicious" link and/or phishing attempts . . .

[Lufia]

Sorry, but just because you don't like the answers doesn't mean they're wrong.

Do you understand why it is the truth that it is your own fault? Even Valve itself doesn't know your PW, it's just stored as a HASH, so you must have given away your own credentials somehow, be it through some site or other action on your part.

If Steam wasn't secure, the forum would look completely different. So before you complain about the system, you should first take care of the biggest weak point and that is in front of your PC.

By the way, I don't mean that in a derogatory way, it's just the truth.

[blunus]

Originally posted by NoName:

...

Ignorance is bliss.

Who used the account to cheat or cause grief is literally irrelevant just because you are responsible for your account and all actions on it. The ban is permanent and will not be removed ever.

[NemesisChaingunner]

3. Acc got hacked/Hijacked by someone with accest of steam info prob couse of some groups got hacked (my guess) cant tell since got no clue how it got hacked just guessing.

No you just didnt secure your account and clicked links. That's your problem, if you dont like the answer, tough ♥♥♥♥.

[Ç!ｲ!乙3η-ﾒ]

You had to have logged in somewhere on a third party site...

Your login details were stolen when you tried to log into Steam using a fake login page (easy to mistake for the real one).... So while you think you were hacked you were actually PHISHED...

At the time the phishing took place they added an API key to your account so they could access and use it...

Check the API key here: https://steamcommunity.com/dev/apikey (Domain name should be empty).......

[Aluvard]

Adding to what @Lufia posted above.

You weren't hacked, your account was hijacked by scammers via variety of possible options. For all you know you might log into what looked like legit steam site, but in reality it was a cleverly designed scam site.

Also you're making mistake in thinking - it must have happened recently. Nope, some scammmers are willing to wait for years undetected, till account is profitable enough for them.

Originally posted by Nx Machina:

Accounts are PHISHED not hacked , because the end user gave away all their account details. The account name, the password and the KEY to the door, the Steam Guard Mobile code giving them access to your account.

How? by either logging into a known scam site or sites, tailored malware on your PC, the vote for my team scam, you have a pending ban scam on discord, free knife click the link etc.

How does Steam (a program) know it is not you when all the account details are correct? It doesn't, therefore any action taken on your account is seen as you doing said actions.

The alternative is not plausible:

1) Someone would have to "GUESS" your account name from "millions of possible combinations".

2) Next they would have to "GUESS" your password from "millions of possible combinations" and then match it to your account name with "millions of possible combinations".

3) And finally they would have to "GUESS" the Steam Guard Mobile code "which changes every 30 seconds" to match both your account name and password to then have access your account.

And finally:

1) Only you and Steam Support know your account name until you give it away.

2) Steam passwords are hashed, not stored therefore only you can give it away.

3) They physically need to have your mobile for the code, or you need to enter the code.

Originally posted by Lilim:

• Have you been asked to vote for a team/tournament/pixel art?
  
• Have you been asked to register for a tournament?
  
• Have you used any third-party site for gambling or trading?
  
• Have you logged in on a public device?
  
• Have you entered any giveaways/giveaway groups?
  
• Have you tried to claim any "free 50$ gift cards"?
  
• Have you talked to an "admin" after being "accidentally reported"?
  
• Does someone else use your PC or your account?

Adding to that - if someone really would be able to hack through Valve measures, he would go after Gabe Newell account to prove it to the world.


Regarding Antivirus - premium version really doesn't mean anything because they're not all equal to each other. Some antiviruses are barely above being viruses themselves or are widely considered as a garbage (to name a few: Webroot, TotalAV).

[The Giving One]

Originally posted by NoName:

Since its Steam side security problem they are responsible for this....

Nope, sorry but that's incorrect.

Valve's database worth millions in phone numbers, email addresses, banking information, payment methods/credit card numbers, etc. was not breached just so some hackers could play Rust from your account and cheat.

Originally posted by NoName:

...someone managed to login into my steam account and play game Rust with I assume cheats...

Hacker #1 : "We got past the firewall !!! We are IN ! We just hacked the Valve database !!!

QUICK !! Start the download of all that information we have at our fingertips. We can sell it on the dark corners of the web to the highest bidder !!!"

Hacker #2 : "Nah. Forget that. Let's play Rust from this dude's account, and cheat and get it banned instead, that would be a much better use of our limited time from this once-in-a-lifetime hack !!"

(sarcasm)