My Steam account got hacked…
Yesterday my Steam account got compromised by social hacking a Steam supporter.
The only thing that warned me was a text msg stating: “Steam Support has removed this number from the account zukwiz. Contact us if you didn't request this.”
This is what happened - and I’m sharing so you might not experience the same, and can keep your account safe!
1 - Someone social hacked a Support Agent at Steam to persuade them that they are me. They succeeded.
2 - Somehow someone got access to my private info, either hacked my email, my mac or got some info via a stream when I bought some stuff on Steam market.
3 - The Steam support agent believed the hacker and removed my phone number on Steam and this triggered a text msg to my phone (the only warning I got!!):
“Steam support has removed this number from the account ZukwiZ. Contact if you didn’t request this.”
No emails or other warnings!
4 - when I got the text I thought it was just a phishing text, but I checked my Steam acc right away, and realised what was happening..
5 - I checked my Steam account and noticed that Mobile Steam guard was removed (yellow badge instead of green). And hacker got their email updated, and mine was removed.
6 - I immediately changed the email address (while my heart also immediately hit 160).
As Steam Guard was removed I tried enabling it again. But app caused problems and I had to reinstall it.
After install I could fortunately enable the Guard again.
7 - I wrote Steam support and today I got the feedback as per screenshots.
I’m honestly really happy about the dialogue between the Steam agents and myself. Awaiting further info from them as well.
8 - I checked device activity and steam login activity, but could not find anything suspicious (which is also a bit wierd). However, I learned that it can take 24h before the activity pages on steam reflect correct activity. We will be monitoring.
9 - I’m now seeing that there is activity on my Mac chrome browser even though I have not used it since yesterday so possibly something bigger going on? Time will tell.
10 - my account is now (again) in trade hold for 15 days. Gladly can state that my items are safe for now on my own, and Device’s account :)
Another situation that makes me consider further diversifying.
Stay safe.