Yukana2710 4. feb. 2023 kl. 12.46
Steam Scammers
Hello there, sorry if I asked questions 'bout thounsand times asked by another ppl.

So thru several yrs of my experience in this platform, there's 2 method of scammers when they try to hijack our acc:
1. Accidentally report our Steam acc then asked us to contact them via Discord
2. Vote CSGO

My questions:
1. Is there any other scam method beside these?
2. How do I resolved the problem if my acc has been hijaced? My friend recently told me their acc has been hijacked for 'bout 6 hrs. What should they do?

Thx very much.
Opprinnelig skrevet av Jerry:
About the second one, tell your friend to do all these steps (a malware scan can also be recommended):

Deauthorize all devices https://store.steampowered.com/twofactor/manage
Change your password on a secure device.
Generate new back up codes. https://store.steampowered.com/twofactor/manage
Revoke the api key https://gtm.steamproxy.vip/dev/apikey
Check that the email and phone number on the steam account is still yours.
< >
Viser 110 av 10 kommentarer
Forfatteren av denne tråden markerte dette innlegget som svar på det opprinnelige emnet.
Jerry 4. feb. 2023 kl. 12.55 
About the second one, tell your friend to do all these steps (a malware scan can also be recommended):

Deauthorize all devices https://store.steampowered.com/twofactor/manage
Change your password on a secure device.
Generate new back up codes. https://store.steampowered.com/twofactor/manage
Revoke the api key https://gtm.steamproxy.vip/dev/apikey
Check that the email and phone number on the steam account is still yours.
Jerry 4. feb. 2023 kl. 12.58 
About the first, there are many ways, phishing sites can be spread. The "vote my team" strategy is one, you already know. Also a popular one are "giveaways" in group chats. Or asking you to give a like to a picture. Or to check an inventory item. Anything, where a false Steam link can be snuck in. And then there is the load of external trading sites, with three malicious ones for one clean one at best. Don't get overly focussed on a specific approach.

If a Steam subpage asks for your login, although you are logged into the main page in your browser, be alert.
Sist redigert av Jerry; 4. feb. 2023 kl. 13.00
Yukana2710 4. feb. 2023 kl. 13.09 
Opprinnelig skrevet av Jerry:
About the second one, tell your friend to do all these steps (a malware scan can also be recommended):

Deauthorize all devices https://store.steampowered.com/twofactor/manage
Change your password on a secure device.
Generate new back up codes. https://store.steampowered.com/twofactor/manage
Revoke the api key https://gtm.steamproxy.vip/dev/apikey
Check that the email and phone number on the steam account is still yours.

Thx U, but how 'bout if we don't have Steam Mobile Authenticator on?
Jerry 4. feb. 2023 kl. 13.26 
Opprinnelig skrevet av Yukana2710:
Thx U, but how 'bout if we don't have Steam Mobile Authenticator on?

In this case, skip the step about backup codes. The other ones are still relevant. An API infection (the usual form of hijackings in the last 5-6 years) can be as harmful with or without authenticator.
Yukana2710 4. feb. 2023 kl. 13.34 
Yukana2710 4. feb. 2023 kl. 13.35 
Opprinnelig skrevet av Jerry:
About the second one, tell your friend to do all these steps (a malware scan can also be recommended):

Deauthorize all devices https://store.steampowered.com/twofactor/manage
Change your password on a secure device.
Generate new back up codes. https://store.steampowered.com/twofactor/manage
Revoke the api key https://gtm.steamproxy.vip/dev/apikey
Check that the email and phone number on the steam account is still yours.

Ah, yes. Regarding API Key, when I clicked the link it says registering my API key. We only need to register our API Key when our acc is hijacked or should I do it too now?
Pscht 4. feb. 2023 kl. 13.47 
You are supposed to REVOKE it. Unless YOU put one there VOLUNTARILY and not because someone told you to, the field should be empty.
Sist redigert av Pscht; 4. feb. 2023 kl. 13.47
Teksura 4. feb. 2023 kl. 14.27 
If you have to ask any questions at all about an API key, you shouldn't have any of them active at all.
Yukana2710 4. feb. 2023 kl. 20.18 
OK, TYSM for the help guys :happypengy:
< >
Viser 110 av 10 kommentarer
Per side: 1530 50

Dato lagt ut: 4. feb. 2023 kl. 12.46
Innlegg: 10