Shadow hijacking by Chinese
My account was hacked, and all the money in my wallet was spent on Rust, which I never installed on my authorized computer. The security page only shows my PC, phone and browser. But somehow the hacker was playing through family sharing or whatever (screenshot, I don't have such groups). My account was supposed to be protected by two-factor authentication.
https://steamcommunity.yuanyoumao.com/sharedfiles/filedetails/?id=3607593221
The purchase history shows the hacker's IP address is more than 3 km away from me. Steam then blocked my access to this information.

Waiting for response from Valve support.

In any case, I recommend you to force log out of Steam for all devices, as this platform seems to be unreliable.
最后由 Digent 编辑于; 11 小时以前
< >
正在显示第 1 - 15 条,共 15 条留言
shadow jacking who ? :csgocross::csgocross:
https://steamhelp.yuanyoumao.com/en/faqs/view/6639-EB3C-EC79-FF60

https://steamcommunity.yuanyoumao.com/sharedfiles/filedetails/?id=1126288560

The only one who can hijack your account, is when you give your credentials to a 3rd party. If you cannot help yourself for falling for scams, that's not a Steam problem.
最后由 Satoru 编辑于; 10 小时以前
引用自 Satoru
https://steamhelp.yuanyoumao.com/en/faqs/view/6639-EB3C-EC79-FF60

https://steamcommunity.yuanyoumao.com/sharedfiles/filedetails/?id=1126288560

The only one who can hijack your account, is when you give your credentials to a 3rd party. If you cannot help yourself for falling for scams, that's not a Steam problem.

I still have access to my account.
Explain me, why it's my fault that steam gave access to my account to different person bypassisg 2F authorisation and hiding his PC from lisf of authorised devices?

It's funny to get a VAC ban in a game I deleted 10 years ago.
引用自 Digent
引用自 Satoru
https://steamhelp.yuanyoumao.com/en/faqs/view/6639-EB3C-EC79-FF60

https://steamcommunity.yuanyoumao.com/sharedfiles/filedetails/?id=1126288560

The only one who can hijack your account, is when you give your credentials to a 3rd party. If you cannot help yourself for falling for scams, that's not a Steam problem.

I still have access to my account.
Explain me, why it's my fault that steam gave access to my account to different person bypassisg 2F authorisation and hiding his PC from lisf of authorised devices?

It's funny to get a VAC ban in a game I deleted 10 years ago.

Because Steam did NOT give someone else access. You shared/leaked your username, password and LIVE Steam guard code. Often done by logging in on dodgy phishing websites. An alternate possibility is that your system is compromised and Malware stole the login token, little file that tells Steam its you so you don't need to enter login details when you open Steam. Malware can delete themselves after transferfing data to a hacker

Do all of these to secure youer account and KICK logged in device out
引用自 Digent

I still have access to my account.
Explain me, why it's my fault that steam gave access to my account to different person bypassisg 2F authorisation and hiding his PC from lisf of authorised devices?

Because steam did not give away access

You did

If you give away your credentials to a scam website, you have no one but yourself to blame.

It's funny to get a VAC ban in a game I deleted 10 years ago.

If you cannot control your account, that is not Steam's fault. It is your fault.

Its always amusing when people think Steam is somehow giving accounts away to scammers that are worth literally nothing. Why would a scammer use an unknown, unilateral hijacking tool, and waste it on your utterly worthless account. Your account is worth nothing. Why did they not use this magical tool to hijack any of the number of trading bots who move literally thousands of dollars of trades every second. Why would the not then use those bots to move trades to their own accounts to make money. Why would they use it on your worthless account. Why woudln't they use it to hold a streamer's account hostage. Why wouldn't they use it to hijack a developers account and hold their game and store hostage. Again why wouldn't they use it for literally ANYTHING ELSE, other than your worthless account.
最后由 Satoru 编辑于; 10 小时以前
Steam did not give someone else access to the account. You were phished or installed malware.
引用自 Supafly
your system is compromised and Malware stole the login token, little file that tells Steam its you so you don't need to enter login details when you open Steam. Malware can delete themselves after transferfing data to a hacker

Do all of these to secure youer account and KICK logged in device out
Ah, classic "it's your fault that you were robbed, r***d or m******d".

So, Steam Guard is joke. I wonder how session token was stolen or hacked.
Ironically, I can't access my inventory for months, while a guy 3000+ km away frome me can do whatever he wants.
If you file share or anything like that, you are a target. Piracy causes these issues the most.

Not to mention those stupid gambling sites, any sites with ads as those ads could have tracers, basically do not trust any website that is not using HTTPS or involved with "too good to be true" details/deals, etc... And adult websites can also clinch you as well, this is how 99% of people get adware.

Fun fact: all adult websites contain adware and/or spyware.
最后由 Alice Liddell 编辑于; 8 小时以前
引用自 Digent
Ah, classic "it's your fault that you were robbed, r***d or m******d".

If you refuse to acknowledge where the problem is, you will be doomed to repeat said problem.

Steam does not 'give accounts away'

Users give their accounts away to scam websites
引用自 Digent
引用自 Supafly
your system is compromised and Malware stole the login token, little file that tells Steam its you so you don't need to enter login details when you open Steam. Malware can delete themselves after transferfing data to a hacker

Do all of these to secure youer account and KICK logged in device out
Ah, classic "it's your fault that you were robbed, r***d or m******d".

So, Steam Guard is joke. I wonder how session token was stolen or hacked.
Ironically, I can't access my inventory for months, while a guy 3000+ km away frome me can do whatever he wants.
Ahh the usual everyone but me response. Steam didn't get hacked or give someone access, no matter how much you want to plead innocent. Continue blaming others and you'll not figure out how it happened and how to protect yourself in the future
引用自 Supafly
Ahh the usual everyone but me response. Steam didn't get hacked or give someone access, no matter how much you want to plead innocent. Continue blaming others and you'll not figure out how it happened and how to protect yourself in the future
I know, I know. So, you are the kind of people who glorify the criminals and lead the Europe and US to what we have now.
You remind me of people who blame little girl who will never grow up for provoking a pack of "friendly" dogs.

I admit that my active actions led to losing access, but I still don't understand why Steam's security system couldn't even detect such machination. All the value of Steam Guard is gone.
引用自 Digent
引用自 Supafly
Ahh the usual everyone but me response. Steam didn't get hacked or give someone access, no matter how much you want to plead innocent. Continue blaming others and you'll not figure out how it happened and how to protect yourself in the future
I know, I know. So, you are the kind of people who glorify the criminals and lead the Europe and US to what we have now.
You remind me of people who blame little girl who will never grow up for provoking a pack of "friendly" dogs.

I admit that my active actions led to losing access, but I still don't understand why Steam's security system couldn't even detect such machination. All the value of Steam Guard is gone.

No I pointed out possibilities as to how your account got hijacked, no hacked, you're the one that spat their dummy out. Not my fault yet there was me being reasonably and offering reasons.

Steams system see the hijacker had the correct username, password and a LIVE guard code. People travel all the time, so geo restricting isn't a thing. Other option was the Login token and Steams system would only see YOU loaded Steam because the login token would have been yours and that saved as being logged in.

2FA is just another Step in security it is NOT a magical make an account immune to compromise. Plenty of other people have accounts that are protected with 2FA compromised all the time. Only takes one mistake to open things up to be compromised. Be thankful it wasn't your bank account and learn from it so that you take extra care in the future

But keep this up being a D and I'll switch the the other side and root for the hijackers because being helpful and constantly getting your :poo: is getting old....
引用自 Supafly
People travel all the time, so geo restricting isn't a thing.
Well, I can thank you for brief describing of Steam's work.
It seems that hardware binding also isn't a thing to Steam.
Now I like EGS more for constantly forgetting that my PC is my PC and my browser is my browser.
Good for you! Changes nothing.
引用自 Digent
Ah, classic "it's your fault that you were robbed, r***d or m******d".
If you willingly give the robber your house keys because he promised you something good in return, then yeah, it kind of is your fault.

We're not saying you did it willingly or even knew it was a scam. If you had known, you wouldn't have done it.

The only reason we say this is so that you can be aware of it in the future. If you know how the scams work, you won't fall for them, because you'll recognize it when you see it.

If you refuse to learn from your mistake and instead deflect all blame, you're just going to end up a victim again.
最后由 Haruspex 编辑于; 6 小时以前
< >
正在显示第 1 - 15 条,共 15 条留言
每页显示数: 1530 50