Just as the title said.

I don't use steam every day, in fact it's been around 2 weeks since i logged in into steam.
Today i logged in on steamgifts, and this is what i got after a few minutes. (got the warning after about 30 mins since i logged in here)

http://i.imgur.com/43a9l7t.png

And I'm not that dumb to use the same password from steam on any other accounts, also i'm not such a potato to use the steam account on scam pages.

I'm 100% sure that the only site where i used my steam password was steamgifts.
And no, i don't have any trojans in my pc.

(i really doubt that someone broke into LastPass servers and got my steam password from there.)

Edit:

  1. I never gave my password.

  2. I don't use this password on any other accounts/sites/etc. Also it's totally random.

  3. I'm more than sure that i don't have any malwares or trojans in my pc.

  4. The only site where i used my password is this one.

  5. I use LastPass, enhanced steam and steamgifts plus.

11 years ago*

Comment has been collapsed.

You actually log into the steam network, not this site.

11 years ago
Permalink

Comment has been collapsed.

+1

11 years ago
Permalink

Comment has been collapsed.

Whatever, the only steam-log in button i clicked in the past 2 weeks was the one on this site.

11 years ago
Permalink

Comment has been collapsed.

Maybe they sent you the mail because you didn't log on 2 weeks and somehow you now logged with a different IP, so they just send this to advertise that there may be some suspicious activity.

I seriously don't know, just guessing, have never been logged off from Steam for so long.

That or some phishing

11 years ago
Permalink

Comment has been collapsed.

I've never been in Minsk...
And if it's not this site, then let's try to find out the reason why i got this.

  1. I never gave my password.
  2. I don't use this password on any other accounts/sites/etc. Also it's totally random.
  3. I'm more than sure that i don't have any malwares or trojans in my pc.
  4. The only site where i used my password is this one.
  5. I use LastPass, enhanced steam and steamgifts plus.
11 years ago
Permalink

Comment has been collapsed.

5 - You have NEVER used your password here. You have used it on Steam. The fact you still claim this means you are a colossal idiot who refuses to read any responses in this topic, and just want to blame someone else for your stupidity.

I'm sure you close your eyes around predators, as if you can't see them, they can't get you, right?

11 years ago
Permalink

Comment has been collapsed.

Then please, tell me where was the leak? Please enlighten me, because i'm a colossal idiot and i know how to protect my pc/passwords.

11 years ago
Permalink

Comment has been collapsed.

Damned if I know, I'm not there. But as has already been said in this topic, it isn't SteamGifts. The information this site gets from Steam is little more than your library, wishlist, the kind of stuff visible on your profile, just streamlined for a site to read. The login is still through the Steam site.

11 years ago
Permalink

Comment has been collapsed.

Ok ok, i don't think i blamed ONLY steagifts, why you feel so attacked? Why don't you also defend LastPass?
It's weird to see so many people upset because i dared to say something about steamgifts....
Whatever...

11 years ago
Permalink

Comment has been collapsed.

"I'm 100% sure that the only site where i used my steam password was steamgifts."

Now SG only gets your ID to get all the info it needs to work, which is visible to anyone (Steam itself provides that).

No way it's caused by SG, that's why him and the others defend this site.

11 years ago
Permalink

Comment has been collapsed.

Probably because it is possible (if unlikely) that it was LastPass, whereas it is impossible it was SteamGifts.

11 years ago
Permalink

Comment has been collapsed.

I can't say anything about LastPass because I know nothing about that service. I do know enough about the Steam login system used here to know that this site wasn't the problem.

As for saying you didn't blame only SG, 'I'm 100% sure that the only site where i used my steam password was steamgifts.' I felt that you should be corrected there, as there is something else which is the problem, even if you aren't aware of it.

11 years ago
Permalink

Comment has been collapsed.

People are only "attacking" you because you do not realize what they're saying. Steam Gifts sends a query to Steam. You input your username and password on Steam. Steam then sends an okay to Steam Gifts showing that you're logged in. Steam Gifts can not receive your password from Steam with this setup. It's more likely that you have malware installed. Either that or Last Pass really did mess up.

If you're using a laptop, did you sign in at any public wi-fi locations?

Use your Anti-Virus when in safe mode to see if there are any viruses. There might be a rootkit. In that case, you should probably download some software to remove the rootkit.

11 years ago
Permalink

Comment has been collapsed.

Sadly no one in here are Steam supports, so no one will tell you what really happened, but we all can tell that the problem IS NOT THIS SITE, as you log into Steam not SG.

Now if you act a little less arrogant you might get some real help.

11 years ago
Permalink

Comment has been collapsed.

The screenshot he posted is from a mail? Steam gonna send you mail whenever you log in from a new location?

11 years ago
Permalink

Comment has been collapsed.

Does sharing their IP count as calling out?

11 years ago
Permalink

Comment has been collapsed.

Well, i don't really care. It's not like I'm going to protect whoever tried to mess around with my steam account.

11 years ago
Permalink

Comment has been collapsed.

Your choice.

11 years ago
Permalink

Comment has been collapsed.

I don't think that it does. This person, whoever they are, clearly tried to access his account. It doesn't look like they got in though. That's why it's only an attempt.

11 years ago
Permalink

Comment has been collapsed.

You log in to this site through steam. They don't share your password with anyone. So you got phished, gave your password to someone (friend), have a malware/trojan etc. It's not this site.

11 years ago
Permalink

Comment has been collapsed.

Please bother to read my entire post, nobody knows my password, and I don't have any trojans/malwares or anything like that.

11 years ago
Permalink

Comment has been collapsed.

Well, read these responses. It has nothing to do with SteamGifts, leaving the fault to be entirely on your end.

11 years ago
Permalink

Comment has been collapsed.

Please bother to read his entire post. It's either your PC or you. But not this site.

11 years ago
Permalink

Comment has been collapsed.

He didn't got pwnd, otherwise it would not have been a login attempt but a successful one and his pswd and email would have been changed, so it's not phishing, no trojan, no keylogger, no malware, no spyware.

Just a random attack.

11 years ago
Permalink

Comment has been collapsed.

+1.

11 years ago
Permalink

Comment has been collapsed.

Well then, one of your neighbor is a psychic. Change your house immediately.

E: Oh yeah and Lastpass got it's database stolen recently. Could be a problem there. I use Lastpass too, I never had any unauthorised logins.

11 years ago
Permalink

Comment has been collapsed.

This site doesn't get your password at all. You are logging into Steam, all SG gets is a chance to look at your profile. Nothing beyond that.

11 years ago
Permalink

Comment has been collapsed.

This. What I see in your image seems like a random attempt not an actual login. Brute force attack probably.

11 years ago
Permalink

Comment has been collapsed.

So? People permanently try to steal randoms accounts.
Who hasn't gotten a warning before that some Chinese, Russian or Belarus IP tried to access his WoW/D3 account?
If your password isn't shit (god, 123, qwerty etc) you don't have to worry.

11 years ago
Permalink

Comment has been collapsed.

Nobody is dumb enough to believe that steamgifts can gain steam password. Change your password and leave steamgifts, you won't have any further problems, involving steamgifts.

11 years ago
Permalink

Comment has been collapsed.

Steam OpenID

Steam OpenID Provider

Steam can act as an OpenID provider. This allows your application to authenticate a user's SteamID without requiring them to enter their Steam username or password on your site (which would be a violation of the API Terms of Use.)

11 years ago
Permalink

Comment has been collapsed.

1.) You're too paranoid
2.) You can't even make clickies :c
3.) Thanks for Skyrim

11 years ago
Permalink

Comment has been collapsed.

It's actually really easy to make links with steamgifts plus

11 years ago
Permalink

Comment has been collapsed.

Too many googles , -rep

11 years ago
Permalink

Comment has been collapsed.

yup.

11 years ago
Permalink

Comment has been collapsed.

11 years ago
Permalink

Comment has been collapsed.

My guess is someone actually accessed your computer while you are logged in and away.
Either that or you got a keylogger or something without you knowing.
What's your AV just to ask?

11 years ago
Permalink

Comment has been collapsed.

So you come here to rant and won't even listen to reason; you've already made up your mind, you refuse to acknowledge facts, and are only waiting/hoping someone will patronize you? What are you, some kind of liberal?

11 years ago
Permalink

Comment has been collapsed.

Either your PC has a malware/keylogger and your AV hasn't detected it yet, or your password was easy enough to get access to your Steam account (which is the most possible reason). So change your Steam account password AND your e-mail password just to be sure. Also change security questions and all that stuff.

The site only asks for your Steam account username, and as you can see before you enter your steam username and password, the site redirects you to a Valve Corporation secure link, so SteamGifts has nothing to do with your problem.

11 years ago
Permalink

Comment has been collapsed.

My suggestion would be to change those passwords at a different location. Just in case there's a keylogger on his computer.

11 years ago
Permalink

Comment has been collapsed.

Deleted

This comment was deleted 2 years ago.

11 years ago
Permalink

Comment has been collapsed.

Do you guys not see the IP address? Stop saying someone accessed his computer or controlled his computer.

11 years ago
Permalink

Comment has been collapsed.

Deleted

This comment was deleted 1 year ago.

11 years ago
Permalink

Comment has been collapsed.

Unless you intentionally put your password in a comment, or sent it as a CD key to a winner, you have never given your password to the site. You might want to contact steam support and see if they can help you.

11 years ago
Permalink

Comment has been collapsed.

Just because there was a login attempt doesn't mean that they have your password. And it doesn't say it was a successful login. If it was successful, you probably would have had your password changed and couldn't log in to your account. Probably some asshat just picking random accounts they come across and trying to brute force them or something.

If you have steamguard enabled and you use different login credentials for steam and your email account (and are absolutely certain you do not have a trojan or keylogger on your PC) you're probably fine.

If you're still worried about it, contact steam support. There's absolutely nothing anyone here is going to be able to help you with.

11 years ago
Permalink

Comment has been collapsed.

The US government has recently been trying to take things from most sites which would give them un-encrypted data with things like passwords. Just sayin'

11 years ago
Permalink

Comment has been collapsed.

rofl

11 years ago
Permalink

Comment has been collapsed.

And no, i don't have any trojans in my pc.

That's what they want you to know

11 years ago
Permalink

Comment has been collapsed.

It's funny because there are plenty of people who are "more than sure" they don't have any malware, and yet do.

Also, consider the location you signed in from. If you only signed in two weeks ago, that's an ample timeframe for someone to screw around with your account if you were unfortunate/forgetful enough to tick "remember my details" and use a computer you don't own.

What about your password itself? Consider it's length and content. Some passwords are far easier to brute-force than others. The password "password123" would be found in seconds. Now is always a good time to upgrade to a more garbled password with symbols and numbers in.

Your email account may also be the soft-point. If someone can gain access to the associated email account then they also have access to the password reset option.

And finally, did an actual intrusion occur? An attempt at entering your account doesn't always mean a hostile takeover attempt. Some people have similar usernames and after long enough without manually signing in, they can simply forget their original account name (if you're like the many who alter their handle through the settings).

11 years ago
Permalink

Comment has been collapsed.

I bet my left arm you're working at IT

11 years ago
Permalink

Comment has been collapsed.

You get to keep your arm... for now! >:I
But I'll get it eventually-

Though I'm not actually working in IT, it's close enough.

11 years ago
Permalink

Comment has been collapsed.

Regardless of whether or not he's working IT, I'm not, and I could say the same thing (though I wouldn't because laziness).

11 years ago
Permalink

Comment has been collapsed.

Coincidence.

11 years ago
Permalink

Comment has been collapsed.

Steam may have changed their "suspicious" algorithms recently. I was just warned that a 1-for-1 trade with the trading card bot looked suspicious and that I needed to acknowledge that I trusted it before proceeding.

11 years ago
Permalink

Comment has been collapsed.

Oddly enough someone was on my account without authorization(Hacked I suppose) recently, sent my friends some viagra links.

I changed my password, no worries probably.

11 years ago
Permalink

Comment has been collapsed.

Closed 11 years ago by Fibblez.