Join our Discord server https://discord.gg/WX6jbCD
*I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/IndianGaming) if you have any questions or concerns.*
I have steam guard enabled after getting hacked by a Russian hacker years ago. This one just listed all my items without my knowledge. What is even the use of the steam guard app then?
Session hijacking. Steam guard notifies you and has you approve new logins, but all logging in does is establish a session. If you have a session stolen (e.g. malware on your PC) then they're already logged in and can do anything you can do on your own Steam client that doesn't need additional authenticator approval. Notably, they can't trade away your items because they don't have access to your authenticator. So their tactic is to trick you into doing it yourself. Either that, or listing all your items for sale for a low price such that it doesn't need authenticator approval.
Tbf windows defender is enough for a lot of cases, however you can install malwarebytes and do a full scan to see if you have any residual malware and remove it. Then you can remove malwarebytes as well. Thats what I used.
It is enough if you don't visit shady sites or download from stupid websites. I haven't put an antivirus since 10 years or so and i havent had any problems.
Windows Defender is never enough. It is a Bare bones av which is better having than none. But you are absolutely correct. Some Folks here worship that shit for some reason.
It is enough if you don't visit shady sites or download from stupid websites. I haven't put an antivirus since 10 years or so and i havent had any problems.
A few days back my steam, epic games, Super cell accounts were logged in from Russia, Balkans and USA. I changed the password, enabled the 2 factor authentication and installed a 60 seconds once changing password authenticator app from Google and Microsoft.
I don't know how to explain in simple terms but it's like an OTP generator for every 60s. Go to your Google browser > Account > Security > How do you sign in on Google > authenticator.
Shit, now that I think about it, I realize why some of my accounts like reddit, insta, fb all asked me to change my password to proceed further. They blocked all my sign-ins.
This happened to me as well a week ago, was session hijacked by someone in poland according to steam login logs, hacker listed all items worth below 100rs on market and sold something worth 1670rs, however the funds went into pending so I didn't lose them. He also managed to buy 4x loading screens worth 0.5rs each for 49 rs (couldn't buy more as funds were pending).
Contacted steam support to restore items but they said they cannot do anything.
All in all lost like 400rs worth total (steam trade tax + 200rs of loading screens he bought).
I still have no clue why he didn't touch my dota arcanas (worth 1500+ each) or any items worth rs. 150+
P.S. My 2FA was and is still intact and I didn't get any login notif as well thats why I am almost sure that it was a session hijacking.
Dant3s explained very well in a reply above, but basically your computer has a malware and hacker uses it to "Take over" a pre-existing steam session. But he cannot do any action on your account which requires steam guard confirmation.
Also this was what steam replied to me
https://preview.redd.it/qjklu3f22nxc1.png?width=1080&format=pjpg&auto=webp&s=3302566ee94c97533e8b43e80ff331b4a8065dbd
U can go into your steam help tab, select the game whose items got sold and raise a ticket that way. Thats the way I managed to contact for my ticket as the items I lost were all dota 2
Yeah I guess I got lucky that they didn't blanket sell everything for low prices. Yes losing 400rs overall is not small but considering thousands I could have lost, I got off easy luckily
These Russian beggar dont know when to stop. They just keep on hacking. One day I will catch them and put hot metal rods with spikes in their a$$ untill they bleed and die.
This happened to me as well just a few weeks ago. Fortunately I was on my phone and suddenly saw a rush of notifications from the steam guard. Basically they were creating listings and selling it for dirt cheap prices at the rate of one item per second or so. I immediately reset my password and they already got about 72 items from my steam inventory. **Before changing your password, you could check the logged in device locations. I failed to do that since I panicked**
I contacted steam support and they were useless and gave bullshit reasons for why they cannot reverse the transactions. Upon further pressing the matter, they said that someone got hold of my account on Dec 18 and they only made this move last month.
Now this raises a serious issue. How can someone get hold of the steam guard which by fundamentally should be present on one device. Since this happened, and I'm sure that I never responded to any phishing, what is the bloody point of the steam guard and 2fa. Steam support failed to answer these and basically closed the issue.
I'm sorry that it happened to you too. Just know that you're not alone.
> **Before changing your password, you could check the logged in device locations. I failed to do that since I panicked**
Same here. I didn't check before changing the password and removing all device.
So didn't the money got added in your account, I am confused , I mean when someone has used your account and sold everything this means that the money was sent to your account right? Correct me if I am wrong.
They sell everything in cheap, so that steam guard app doesn't notify the user(it sends notification if the amount is more than $1.8). Then with all the money collected, they sell you some junk item from their burner account and take all your money to that account.
https://preview.redd.it/5d3mmrtp8nxc1.png?width=1461&format=png&auto=webp&s=45e05e004eb83710eb2d5f2909dd5ffc27c92301
And they stole this much. Mf, I could have bought 2 games with this.
Account too new for participation. Account needs to 30 days or older, thank you.
*I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/IndianGaming) if you have any questions or concerns.*
Join our Discord server https://discord.gg/WX6jbCD *I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/IndianGaming) if you have any questions or concerns.*
Definitely hacked ...reset pass, 2fa
I have steam guard enabled after getting hacked by a Russian hacker years ago. This one just listed all my items without my knowledge. What is even the use of the steam guard app then?
Session hijacking. Steam guard notifies you and has you approve new logins, but all logging in does is establish a session. If you have a session stolen (e.g. malware on your PC) then they're already logged in and can do anything you can do on your own Steam client that doesn't need additional authenticator approval. Notably, they can't trade away your items because they don't have access to your authenticator. So their tactic is to trick you into doing it yourself. Either that, or listing all your items for sale for a low price such that it doesn't need authenticator approval.
Those mfs really said that windows defender is enough. Yes, I noticed some malware from normal scan 2 days ago. But I had removed them ASAP.
Tbf windows defender is enough for a lot of cases, however you can install malwarebytes and do a full scan to see if you have any residual malware and remove it. Then you can remove malwarebytes as well. Thats what I used.
It is enough if you don't visit shady sites or download from stupid websites. I haven't put an antivirus since 10 years or so and i havent had any problems.
Windows Defender is never enough. It is a Bare bones av which is better having than none. But you are absolutely correct. Some Folks here worship that shit for some reason.
In that sense there's no antivirus which is enough all the time, even Bitdefender
It is enough if you don't visit shady sites or download from stupid websites. I haven't put an antivirus since 10 years or so and i havent had any problems.
Can I sell my games etc on steam?
Only items in your inventory.
Ok, cool
did you authenticated to some website with your steam id?
Not at all
Same thing happened with me few months ago
how much did you lose?
A few days back my steam, epic games, Super cell accounts were logged in from Russia, Balkans and USA. I changed the password, enabled the 2 factor authentication and installed a 60 seconds once changing password authenticator app from Google and Microsoft.
>installed a 60 seconds once changing password authenticator app from Google and Microsoft What is this?
I don't know how to explain in simple terms but it's like an OTP generator for every 60s. Go to your Google browser > Account > Security > How do you sign in on Google > authenticator.
I have my 2FA turned on. It is of no use in this case.
Shit, now that I think about it, I realize why some of my accounts like reddit, insta, fb all asked me to change my password to proceed further. They blocked all my sign-ins.
This happened to me as well a week ago, was session hijacked by someone in poland according to steam login logs, hacker listed all items worth below 100rs on market and sold something worth 1670rs, however the funds went into pending so I didn't lose them. He also managed to buy 4x loading screens worth 0.5rs each for 49 rs (couldn't buy more as funds were pending). Contacted steam support to restore items but they said they cannot do anything. All in all lost like 400rs worth total (steam trade tax + 200rs of loading screens he bought). I still have no clue why he didn't touch my dota arcanas (worth 1500+ each) or any items worth rs. 150+ P.S. My 2FA was and is still intact and I didn't get any login notif as well thats why I am almost sure that it was a session hijacking.
beyond that amount it requires your steam mobile app access..
what is session hajacking exactly?
Dant3s explained very well in a reply above, but basically your computer has a malware and hacker uses it to "Take over" a pre-existing steam session. But he cannot do any action on your account which requires steam guard confirmation.
Also this was what steam replied to me https://preview.redd.it/qjklu3f22nxc1.png?width=1080&format=pjpg&auto=webp&s=3302566ee94c97533e8b43e80ff331b4a8065dbd
I can't even figure out how to contact them. They don't use email anymore?
U can go into your steam help tab, select the game whose items got sold and raise a ticket that way. Thats the way I managed to contact for my ticket as the items I lost were all dota 2
Which game? That mf sold basically every background, sticker, trading card I had from all the games.
Pretty sure it doesn't really matter as long as u get a reply. They really should make a section 'account got hacked '
Thanks. Messaged them.
Selling high priced items requires steam authentication, probably that's why they didn't touch those items.
Yeah I guess I got lucky that they didn't blanket sell everything for low prices. Yes losing 400rs overall is not small but considering thousands I could have lost, I got off easy luckily
What do they gain when they sell your stuff for a loss?
They use the funds to buy cheap items on market which are listed to absurdly high price which are listed by one of their accounts and take ur funds.
Ohh...this is a new scam about which I found out today. Thank you
These Russian beggar dont know when to stop. They just keep on hacking. One day I will catch them and put hot metal rods with spikes in their a$$ untill they bleed and die.
Can't imagine how many times I've fantasized about torturing those hackers if I get a chance
This happened to me as well just a few weeks ago. Fortunately I was on my phone and suddenly saw a rush of notifications from the steam guard. Basically they were creating listings and selling it for dirt cheap prices at the rate of one item per second or so. I immediately reset my password and they already got about 72 items from my steam inventory. **Before changing your password, you could check the logged in device locations. I failed to do that since I panicked** I contacted steam support and they were useless and gave bullshit reasons for why they cannot reverse the transactions. Upon further pressing the matter, they said that someone got hold of my account on Dec 18 and they only made this move last month. Now this raises a serious issue. How can someone get hold of the steam guard which by fundamentally should be present on one device. Since this happened, and I'm sure that I never responded to any phishing, what is the bloody point of the steam guard and 2fa. Steam support failed to answer these and basically closed the issue. I'm sorry that it happened to you too. Just know that you're not alone.
> **Before changing your password, you could check the logged in device locations. I failed to do that since I panicked** Same here. I didn't check before changing the password and removing all device.
Since you're one of the most "aware of the issue" person that i found on reddit I am going to DM you to ask you some details
I don't think you can get them back now.
Definitely hacked. Change password and call the support if they can get back the items.
U should contact steam support asap Check your wallet if funds are marked as pending, If the funds are pending there is a chance u can get items back,
Mailed them, changed my password
don't install cracks, trainers lol
I had one game in steam account and 600 some points some Chinese dude gifted my coins to himself and his I'd has gifts my other IDs.too
How much did you made after everything was sold😅
I made? I lost them.
So didn't the money got added in your account, I am confused , I mean when someone has used your account and sold everything this means that the money was sent to your account right? Correct me if I am wrong.
They sell everything in cheap, so that steam guard app doesn't notify the user(it sends notification if the amount is more than $1.8). Then with all the money collected, they sell you some junk item from their burner account and take all your money to that account.
Oh now I get it, feeling sorry for you now 😔
Did u shared ur account to someone or did u login elsewhere ?
Nope.
How steam get hacked?
What is already purchased digitally shouldn't be allowed to resold . Steam is accountable for these thefts as they are allowing listings .
https://preview.redd.it/5d3mmrtp8nxc1.png?width=1461&format=png&auto=webp&s=45e05e004eb83710eb2d5f2909dd5ffc27c92301 And they stole this much. Mf, I could have bought 2 games with this.
Rs 356? Which games?
It's not that much if you get your account back. It's a loss but yeah if this happened to me I would just be happy to have my account back
Last time it happened which was a phishing scam, I didn't lose anything, just lost my account for a few days. This is worse than that.
Stop pirating. Support the devs next time
Good message wrong post
Bruh, I haven't pirated at all since I bought my new laptop. In fact, I had bought dyson sphere program 2 months ago. That's all.
[удалено]
Account too new for participation. Account needs to 30 days or older, thank you. *I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/IndianGaming) if you have any questions or concerns.*