AP Hacker Problem

[acfreeman99]

Search me, but I understand that Steam Accounts are hacked quite often !

Yes, but how were you hacked? There have been multiple recent warnings about people clicking links offered in Steam chat, which then ask people to log into Steam and therefore giving away their Steam details.

I have NEVER used Steam Chat....I have always tried to ignore it . I do not click on any links unless certain of what they are.

I have only used Steam to do 3 things....Use TS, look at and download/upload Workshop items and to purchase/validate new/existing DLC.

I suspect that the process of Steam inexplicably and consistently refusing my Password and having me validate it via an e-mail supplied code on EVERY log in over recent days may have something to do with how the hack happened, but I'm not sure how hackers could engineer that. This constant Steam request for a password validation occurred before, a few months ago, but ceased when I submitted a complaint about it ? On that occasion my e-mail address was not changed and my original password continued to work.

I have no idea how it happened, I know that the e-mail address that mine was changed to, was most probably a Russian one.

I don't allow Steam to store my payment details , but have changed my passwords to be sure.

I just wish Steam Support would be a bit quicker in restoring normal service.

Have a quick look in your mail settings, if there is an auto-forward of mails from steam to an email address then that is how they got to your Steam account, by first getting into your email account - they then try to log into steam with your account ....guess any password, login fails, request login code, auto forward the code email to them, they use the code and they are in.......they then change your email address and password and they have your account. If they are smart then they might have removed the forward rule already in your email account to keep you guessing, but they usually don't....once they have control of the account that they are looking for they usually move on. If they have covered their tracks then it is impossible to verify that this is how they got in but it is a very common method of breaking into accounts, and for sure i would recommend changing your email account password immediately as a precaution.

Andy

[IronBidder]

. . . then that is how they got to your Steam account, by first getting into your email account - they then try to log into steam with your account ....guess any password, login fails, request login code, auto forward the code email to them, they use the code and they are in.......they then change your email address and password and they have your account.

Are you sure this is a common attack vector? While this would work it does requires the hacker to have compromised your email account and to know your Steam account name (not your Steam avatar) and to know that the two are linked together. Not impossible, but less common than I think your post implies.

[Springer6]

. . . then that is how they got to your Steam account, by first getting into your email account - they then try to log into steam with your account ....guess any password, login fails, request login code, auto forward the code email to them, they use the code and they are in.......they then change your email address and password and they have your account.

Are you sure this is a common attack vector? While this would work it does requires the hacker to have compromised your email account and to know your Steam account name (not your Steam avatar) and to know that the two are linked together. Not impossible, but less common than I think your post implies.

Back on Steam and In any event my passwords and e-mail account details have all been changed including payment passwords. Steam Support confirmed that my account had been "compromised"

If the above is a valid method, perhaps it should not be on an open forum in detail. I know none of our members would do anything like this, but you don't know who reads these posts ?

I'm still not sure how they benefited from doing this ? As someone has implied, if they were after illicit DLC, there are easier methods .

[Class2ldn]

I just got an email saying gaijin.net account has been accessed. What the hell is that?

Never heard of it?

[IronBidder]

I was actually questioning the idea being promoted by a previous poster that this was a likely way of compromising a steam account. I don't think it is, as it requires two hard to achieve activities to take place simultaneously and no details have been given on how to accomplish either.

Springer6, I don't doubt that your account has been hacked and it will be a frustrating and unnerving experience for you, but I don't think the AP hack caused it. I consider the risk to me of getting my Steam account hacked is very low and I don't intend to take the defensive measures advocated by others. Life gets very fearful and constrained if you see danger lurking around every corner.

[Easilyconfused]

Thread locked.

This has wandered way off the original topic. The issues Springer6 had with Steam were first noted yesterday which predates the notification from AP so the two are most likely unconnected.