Steam Account Hacked

[Easy Rhino]

get a new email addy, format your computer. alert your bank so you can check any unusual purchases. it is that simple. make sure you use complicated passwords which you change every 3 months. always clear browser data never save anything related to what you surf. anything less than that is asking for it.

[Crap Daddy]

Had once my steam account hacked and was very pissed and depressed but we got it back very fast. Steam support is great. The strange thing is I didn't had any malware on the machine so until this day I'm wondering how was it possible.

[Easy Rhino]

Originally Posted by Crap Daddy

Had once my steam account hacked and was very pissed and depressed but we got it back very fast. Steam support is great. The strange thing is I didn't had any malware on the machine so until this day I'm wondering how was it possible.

most likely some 12 year old douche got into steam's database and grabbed some random info and peaced out. it just happened to be yours. happens all the time.

[wiak]

try this
Enable Two-factor authentication on both Gmail and Steam
that way the hacker cant login to your email as he also has to have a auth code that you get in a sms from google, and the steam auth code you get by email when you login to steam on a new computer

[AphexDreamer]

Originally Posted by wiak

try this
Enable Two-factor authentication on both Gmail and Steam
that way the hacker cant login to your email as he also has to have a auth code that you get in a sms from google, and the steam auth code you get by email when you login to steam on a new computer

Yeah I will be doing this.

[AphexDreamer]

Man the bloody bastard is playing my games!

Can some who is friends with me bitch him out!

Or would that not be wise?

Maybe like WE KNOW YOU STOLE HIS ACCOUNT GIVE IT BACK!


THATS ME!!!



I sent him message but no response.

I thought reporting it suspended the account. Guess not

[qubit]

As you found malware on your PC, a reformat and clean install is the only guaranteed way to get rid of it. This is regardless to anyone that thinks they're clever enough to clear out this shit and starts describing all the ways they go about it. It's insidious and nasty and has a way of hiding in ways you'll never find it.

After you're running on a clean machine, you need to make sure you're sitting behind a hardware firewall, or you're toast sooner or later, probably sooner. The standard one that comes with your broadband router is good enough.

Then you need to make sure that you keep your PC fully patched at all times and a decent security suit installed. I use Kaspersky Internet Security, which is very good indeed.

You need to take various other precautions of course, such as safe surfing, not replying to phishing emails and shit like that, but the above are the basics you must do or you haven't a hope in hell.

[AphexDreamer]

I suppose having my Desktop as the DMZ with all ports open led to this.

It just made thing easier to have all ports open so I wouldn't have to port forward but I'm going to take it off the DMZ and just port forward.

[qubit]

Originally Posted by AphexDreamer

I suppose having my Desktop as the DMZ with all ports open led to this.

It just made thing easier to have all ports open so I wouldn't have to port forward but I'm going to take it off the DMZ and just port forward.

Yeah, no wonder you're fucked. You just disabled your firewall completely for the PC. It's then only a matter of time until Windows gets rooted, no matter how well patched it is or what security software you've got on it.

In future:

- Never, ever, put your PC on a DMZ
- Open up the minimum ports you have to and for the minimum time you have to

[AphexDreamer]

Originally Posted by qubit

Yeah, no wonder you're fucked. You just disabled your firewall completely for the PC. It's then only a matter of time until Windows gets rooted, no matter how well patched it is or what security software you've got on it.

In future:

- Never, ever, put your PC on a DMZ
- Open up the minimum ports you have to and for the minimum time you have to

Lesson learned.. For realz..

[craigo]

forget the the tech welcome to knee-jerk reaction formatyourdrivepowerup.com
oh dont worry about your data at all because your backups may be infected forget system restore malware is nasty stuff so just reformat your backup drives as well and snap any discs and bust any tapes you never know where that waskawy wabbit malware could be hiding

[cheesy999]

Originally Posted by craigo

forget the the tech welcome to knee-jerk reaction formatyourdrivepowerup.com
oh dont worry about your data at all because your backups may be infected forget system restore malware is nasty stuff so just reformat your backup drives as well and snap any discs and bust any tapes you never know where that waskawy wabbit malware could be hiding

agreed:NUKE IT
<your hard drives

[AphexDreamer]

Originally Posted by craigo

forget the the tech welcome to knee-jerk reaction formatyourdrivepowerup.com
oh dont worry about your data at all because your backups may be infected forget system restore malware is nasty stuff so just reformat your backup drives as well and snap any discs and bust any tapes you never know where that waskawy wabbit malware could be hiding

Awww man not my backup... I can't do my backup... :/

[qubit]

Originally Posted by AphexDreamer

Awww man not my backup... I can't do my backup... :/

No, don't destroy your backups. Craigo's post is classically unhelpful stuff, where he thinks what I'm saying is "knee-jerk" stuff. Yeah sure.

Do run a virus scan over your data though, when you have that clean machine.

Sounds like you also have hardware problems unfortunately.

Originally Posted by AphexDreamer

Lesson learned.. For realz..

No problem. We all make mistakes. Glad to help.

[craigo]

DONT DELETE YOUR BACKUPS!!
look for malicious software in your installed programs
check the event log
check services.msc
use safemode
run a scan from outside the windows environment
use google
BUT DONT JUST REFORMAT THATS A COPOUT!

[AphexDreamer]

Yeah I did scans every where before and after the reformat for my Primary Drive. Everything is clean.

The only thing I can't get rid of no matter what is this file on my Flash drive. I've tried Kill Disk and several other reformatting tools and nothing gets rid of it. I used this tool to make it boot xp from USB so I thought it was that but looking it up on the webs said it was something nasty. It was called Svhosted I believe. Don't want to plug it in to find out.

Currently going through a vast amount of Windows Updates.

So I have DMZ off. Windows Firewall on. Gmail account with Phone Verification, all passwords changed and stronger than before and a fresh install of Windows 7.

STEAM WHERE ART THOU

[craigo]

now you play the waiting game....steam support will right the wrongs and restore peace to hyrule

[alexsubri]

if you still have the torjans, keyloggers, etc..I wouldn't even bother about quarantine/deleting them...Just back up your data, pr0n, games and do a clean format.

How did you get your account hacked ? My brother got his hacked (he was 13 and idiot when this happen) and they asked him for his password and login claiming they work for steam.

[AphexDreamer]

Originally Posted by alexsubri

if you still have the torjans, keyloggers, etc..I wouldn't even bother about quarantine/deleting them...Just back up your data, pr0n, games and do a clean format.

How did you get your account hacked ? My brother got his hacked (he was 13 and idiot when this happen) and they asked him for his password and login claiming they work for steam.

Well I'm thinking it was since I left all my ports open. Thats no longer the case.

Originally Posted by AphexDreamer

Again...

I sent a ticket I just hope they resolve it soon cause I really want to play Portal 2.

And I don't want him getting me banned.

But the scary thing is they hacked my Email account too!

I've changed the password but is that enough?

I scanned my Computer using malware and it got rid of 9 Nasty objects! Its been months since I did a scan and now I'm thinking this is how they got me.

Is a password change and malware scan removal enough to secure me? I made the password much harder than before.

Thinking about doing a reformat as well. Suggestions? Should I leave the hacked email account and make a new one?

Hey I also had same issues with Steam, solved it easily at the end myself. Have a password that is a mix of random numbers and letters (capital and lowercase), also don't ever save credentials on the system. Somehow they manage even to get it that way. Then write the new password down on a piece of paper and remove anything that has to do with STEAM on your mail. Also my mail account was hacked once, so I also changed that password. It's a mix of "joker signs" (@#$ and so on), numbers and letters.

It's so complex, I have it written down on a piece of paper or I'll just forget it myself.

[AphexDreamer]

Originally Posted by TechnicalFreak

Hey I also had same issues with Steam, solved it easily at the end myself. Have a password that is a mix of random numbers and letters (capital and lowercase), also don't ever save credentials on the system. Somehow they manage even to get it that way. Then write the new password down on a piece of paper and remove anything that has to do with STEAM on your mail. Also my mail account was hacked once, so I also changed that password. It's a mix of "joker signs" (@#$ and so on), numbers and letters.

It's so complex, I have it written down on a piece of paper or I'll just forget it myself.

I've done that I have a password with a mix of special/caps/lower and numbers. Thing is if they have a keylogger doesn't matter how long or complicated your pass is they will know exactly what you press.

But I've disabled DMZ now and formatted.

Also with Gmail they need my phone. Something they won't ever get

You guys think my hacked email address is safe for School use with a password change?

[erocker]

Originally Posted by AphexDreamer

I've done that I have a password with a mix of special/caps/lower and numbers. Thing is if they have a keylogger doesn't matter how long or complicated your pass is they will know exactly what you press.

But I've disabled DMZ now and formatted.

Also with Gmail they need my phone. Something they won't ever get

You guys think my hacked email address is safe for School use with a password change?

Make new email addy's to be safe.

I've also contacted Steam vouging for you by reporting your account and letting them know that your account has be hijacked.

[AphexDreamer]

Originally Posted by erocker

Make new email addy's to be safe.

I've also contacted Steam vouging for you by reporting your account and letting them know that your account has be hijacked.

Thanks really appreciate it. Hope that helps.

[AphexDreamer]

I've got a solution to this. I think.


Steam should have the options for CC or Paypal verfication the moment an account is reported as Stolen or Hijacked.

For example.

I used certain CC information or perhaps a paypal account to purchase something on steam.

My account gets stolen.

I report through steam my account is stolen.

Steam should then instantly (Through steam) request the user to input proof of purchase such as logging into paypal account or providing CC information used to purchase a previous game in order to resume steam use.

If the user cannot he may contact steam support.

Again this should at least be an option of extra security for users if they want it.

What do yall think? Doable? Any flaws in this? This wouldn't be the only way. If the hacker is really good then you would do the normal/current method of getting your account back.

[DannibusX]

Isn't there a new Steam security option? Something that locks your accounts use to a single computer unless you tell Steam it's all good from your main rig?

EDIT: Yup, here it is. Steam Guard. I'd have totally looked it up at steampowered.com, but that site is blacked at work.

http://www.bit-tech.net/news/gaming/...ard-security/1