My account got semi-hacked
I don't know how to called this situation so let I just called it semi-hacked.
I didn't get fully hacked.

Only 2 authorized devices still my PC and iPhone.
My Password still didn't changed.

So my ACC still mostly under my control.

But someone use my ACC to giving point to random artwork I never saw.


Maybe a bit out of topic but something like this also happened to me on other platform too.

Like sometime my Reddit ACC randomly joined NSFW and Investor /r and spamming scammer post on those /r.
But I can fully access to my ACC.

Anyone know what this so called "Semi-Hack" situation actually called? and why it happened, how to prevented it?

I changed my password just to be safe but what actually cause this thing?
< >
Showing 1-2 of 2 comments
you should do all these steps to make sure your account is truly secure.

Secure your account:

1. Scan for malware
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices https://store.steampowered.com/twofactor/manage
4. Change passwords from a trusted/clean device.
5. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage
6. Revoke the API key https://gtm.steamproxy.vip/dev/apikey (the domain field should be blank)
Accounts are phished not hacked.

You gave away all your account details.

The account name, the password and the KEY to the door, the Steam Guard Mobile code giving them access to the account.

How? by either logging into a known scam site or sites, tailored malware on your PC, the vote for my team scam, you have a pending ban scam on Discord, free knife click the link etc.

How does Steam (a program) know it is not you when all the account details are correct? It doesn't, therefore any action taken on your account is seen as you doing said actions.

The alternative is not plausible:

1) Someone would have to "GUESS" your account name from "millions of possible combinations".

2) Next they would have to "GUESS" your password from "millions of possible combinations" and then match it to your account name with "millions of possible combinations".

3) And finally they would have to "GUESS" the Steam Guard Mobile code "which changes every 30 seconds" to match both your account name and password to then have access your account.
< >
Showing 1-2 of 2 comments
Per page: 1530 50