one of my good steam friends messaged me and asked me to vote for his csgo team, so i trusted that link and signed in with my steam info. later on the hacker had access to my steam account and started messaging every friend and whoever didnt reply to him got blocked.

i've lost so many friends and got blocked from so many thinking im the one whos trying to hack them, but it wasnt me. sorry about that, but luckily i got my account back and it's all good now :)

heads up: be careful of these kinda scam, warn your friends about it

message from steam support:

HI,

I can see that your account was recently compromised and that you were able to update your password. The good news is that your account has not >been compromised since this security change was made.

I also recommend scanning your computer for viruses, key loggers, spyware, and other malicious code using antivirus software with updated virus >definitions.

Please see our Security Recommendations article.
https://support.steampowered.com/kb_article.php?ref=1266-OAFV-8478

If there is anything else we can do to help, please let us know.

Steam Support,
Erin

View attached image.
4 years ago*

Comment has been collapsed.

So.. you not been hacked - you're given your account credentials to the thief.

Create ticket to steam support for help.
https://help.steampowered.com/pl/wizard/HelpWithAccountStolen

4 years ago
Permalink

Comment has been collapsed.

i didnt lose any items tho, do i have to create a support ticket still?

4 years ago
Permalink

Comment has been collapsed.

If you're not logged out:

  1. sign-off from all devices.
  2. change your password.
  3. change your steam API key.
4 years ago
Permalink

Comment has been collapsed.

i've done all that :)

4 years ago
Permalink

Comment has been collapsed.

one question: is steam account password are different from your mail account pass?

4 years ago
Permalink

Comment has been collapsed.

yes, i also changed my email password too, i did some research and i followed all the steps there :) is there anything else i should do?

4 years ago
Permalink

Comment has been collapsed.

Is enough, you're safe. One important thing:
LOG-IN ONLY in steam main page (https://store.steampowered.com).

  • if any other page instead of button "login" will ask for your steam credentials (when you're logged on steam) - something is wrong!

My video in polish language (I will create subtitles too):
https://www.youtube.com/watch?v=Z45eWPas3II

4 years ago
Permalink

Comment has been collapsed.

yes i realized theres something wrong after i signed in on that site, thanks for the help tho :))

4 years ago
Permalink

Comment has been collapsed.

I dont understand how people are so lazy, if some page asking you to log in, just open new browser window, go to steam homepage, log in there, refresh that link what you got, if it still want login you know it is fake site. ... its like 10 seconds... why is not everyone doing this.

4 years ago
Permalink

Comment has been collapsed.

don't call me lazy :')

4 years ago
Permalink

Comment has been collapsed.

Probably should still open a support ticket explaining what happened, may help in the likely case that others have opened support tickets about your account sending them phishing links.

4 years ago
Permalink

Comment has been collapsed.

Good idea.

4 years ago
Permalink

Comment has been collapsed.

i just created a support ticket, thanks tho :)

4 years ago
Permalink

Comment has been collapsed.

Exactly

4 years ago
Permalink

Comment has been collapsed.

Deleted

This comment was deleted 9 months ago.

4 years ago
Permalink

Comment has been collapsed.

Setup 2FA

4 years ago
Permalink

Comment has been collapsed.

it's always been ON, but when i signed in on that site it didn't ask me for the security code!!

4 years ago
Permalink

Comment has been collapsed.

well obviously cause it wasnt an actual steam login site :D

4 years ago
Permalink

Comment has been collapsed.

the sign in page looked legit lol. the thing that made me sign in is cause i always clear my browsing history and cookies and i wasn't very careful when i attempted to sign in :/

4 years ago
Permalink

Comment has been collapsed.

I know I checked sites like that one out already as I do some web programming as well and it's kinda interesting to see what the site actually does

4 years ago
Permalink

Comment has been collapsed.

It does mean whoever had your login data wouldn't have been able to actually login without having access to your method of 2FA.

4 years ago
Permalink

Comment has been collapsed.

But apparently someone sent messages using his account.

4 years ago
Permalink

Comment has been collapsed.

One question for those that know how these things work - if you have 2FA and you sign in to one of these sites, how do they use that information to login to your account? How do they bypass steam guard?

4 years ago
Permalink

Comment has been collapsed.

Good question. +1

4 years ago
Permalink

Comment has been collapsed.

They don't.

4 years ago
Permalink

Comment has been collapsed.

They can't. Some fake login websites will also fake the 2fa prompt so you also provide the hijacker with the 2fa code, but otherwise if you have 2fa enabled and you only provide your login info, they cannot access your account.

Gabe Newell demonstrated this when 2fa was introduced.

Of course, if you do share your login info somewhere by accident, you should still change your password ASAP as a security precaution, since that makes it easier for a hijacker to access your account, even with 2fa enabled.

Also footnote... this is my personal understanding of how it works - if something I said is incorrect, please do feel free to correct it.

4 years ago
Permalink

Comment has been collapsed.

I think if you have 2fa by mail and have same password

4 years ago
Permalink

Comment has been collapsed.

Deleted

This comment was deleted 3 years ago.

4 years ago
Permalink

Comment has been collapsed.

Well,it looks good that you got your account back!

4 years ago
Permalink

Comment has been collapsed.

thank u :)

4 years ago
Permalink

Comment has been collapsed.

I asked one of these dudes why they keep spamming me and they actually apologized and said it was a different person the other time LOL

4 years ago
Permalink

Comment has been collapsed.

I've thought about asking those bots why they keep spamming me, but seeing as how they have no games in their accounts and are level zero, I decided it wasn't worth my time. P

4 years ago
Permalink

Comment has been collapsed.

lmfaooo

4 years ago
Permalink

Comment has been collapsed.

Yeaaaah, That is kind of a big deal in steam for a few years now.
Always check url address on your browser to make sure you are not login into a fake website.

4 years ago
Permalink

Comment has been collapsed.

lesson learned

4 years ago
Permalink

Comment has been collapsed.

It's great that I have no friends and no one writes to me ... yes, great
sad lonely sounds

4 years ago
Permalink

Comment has been collapsed.

Sent you a friend invite. You may, of course, turn me down. No hard feelings.

4 years ago
Permalink

Comment has been collapsed.

i'll direct all the hackers to u :))

4 years ago
Permalink

Comment has been collapsed.

damn just found out about it :c , i was hacked too

4 years ago
Permalink

Comment has been collapsed.

i got hacked cause of u xD lmfaooo

4 years ago
Permalink

Comment has been collapsed.

You didn't get hacked. You got hijacked. Those are two different things. :P
You unwittingly gave your account details to a scammer by signing into a fake page.

There is a way to avoid getting hijacked. You could check the link to make sure that you're on the right page. But, I Always make a rule of going to the actual steamcommunity link myself and log in there first before linking any website, even if it's one I think I trust. When linking, you shouldn't have to enter credentials again once you're already logged into Steam on your browser. ;)

4 years ago*
Permalink

Comment has been collapsed.

thanks for the heads up, i'll be more cautious next time. i hope there wont be a next time lol

4 years ago
Permalink

Comment has been collapsed.

I once fell for that many years ago, but luckily, was able to get my account back in a matter of minutes, but I remember the horrible feeling. I probably didn't have any good items or whatever he was looking for so he logged out, this was before 2FA was introduced.

But the funny thing is, I didn't fall for the classic "get free games" scams, but a friend sent me something like that, vote for favorite team or whatever it was.

Also the link had a j instead of an i in community.

4 years ago
Permalink

Comment has been collapsed.

funny! i wouldn't even take any item from a friend just cause a vote! i wanted to help out and never thought it was actually a hacker messaging me :/

4 years ago
Permalink

Comment has been collapsed.

I'm confused by the people saying that this person wasn't hacked.
I get why they think social engineering isn't a "real" hack, but I'd also bet that any hacker worth their salt would concede that social engineering is very much a part of real hacking.

Anyway... best of luck to you, hope Steam support can resolve it quickly, and stop clicking random links!

4 years ago
Permalink

Comment has been collapsed.

honestly i dont understand how this hacking thing work, that's some loser shit!! all i know is someone had access to my steam and was messaging all my friends!

4 years ago
Permalink

Comment has been collapsed.

seems more like you gave your credentials in a plate to someone, it's more like phishing attack than hacking as far as I know. also I remember one of moderators I guess made a thread and posted a very useful YouTube video which explained all kind of scams and ways they will try to get to your account, and this method was obviously one of those, So I guess you might not looked into it or skipped it somehow!

4 years ago*
Permalink

Comment has been collapsed.

we need to hire people who can track down these scammers, find where they live and beat the shit outa them :D

4 years ago
Permalink

Comment has been collapsed.

haha yeah :) I got the same message from old friends in past 2 weeks, but told them I would never use my login info for some random shady website, and also they offered to give me some tf2 or cs go keys in return just for a vote! just right there I became 100% sure it is a scam :)

4 years ago
Permalink

Comment has been collapsed.

Sorry this happened to you. I work with data security and one thing I do tell people to do when they ask how to make things more secure is to consider using a password management tool.Something that will auto-fill the password on a known website. It's very easy to tell if a website is fake, because your credentials won't be shown there. Even your browsers built in password storage is better than nothing, especially if you are using secure, unique passwords. I know with steam it's a little different because you have to type your password into the client to login, so you need to know it, but I don't know most of my passwords on websites, because I'll set them once and forget. I know some people have concerns about 'what if the password manager gets hacked', but the simple reality is that far more data breaches happen because of social engineering or insecure passwords, than because of an actual 'hack'.
And the number of people who use the same password for everything is frightening. When I give them a login with a nice secure password, the first thing they want to do is go and change it to their 'favourite' password. I nearly punched the person through the keyboard the other day when they got the new google chrome popup show up for them on our system, telling them the password they used has been involved in a data breach and they should change it. They were shouting about a data breach on the system and I was like, 'Dude, it's your damn stupid password that you've used on every site that is the problem!! Change it right now or I will lock your account'
Anyway, glad nothing too bad happened to you, never underestimate the lengths con artists will go to for access to your stuff.

4 years ago
Permalink

Comment has been collapsed.

Closed 3 years ago by xSPYROx.