Are you sure he didn't click on any links or log in to any skin websites?

Originally posted by Puddles:

Friend got hacked without clicking any malicous links

someone added him pretneding to be steam support but hes not dumb so just ignored them while in game and blocked them instantly when he had time, but as soon as he blocked them he got logged out of his steam and they hijacked his account, he got it back by changing email password ect, but any ideas how they even hacked him. he just recently unboxed some good skins on cs so im thinking he might have been compromised for a long time but they didnt care do do anything until he had something of worth

Tell your friend to secure his account.

Do not trade until your account is secured.

Take the following steps to secure your account:

1. Scan for malware. If you don't have a malware scanner use https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices. https://steamhost.cn/twofactor/manage
4. Change passwords from a clean computer.
5. Generate new backup codes for your Mobile App. https://steamhost.cn/twofactor/manage
6. Revoke the API key (there should be no key). https://steamhost.cn/steamcommunity_com/dev/apikey


Did your friend use any third-party sites for trading or gambling?

Originally posted by Lilim:

Originally posted by Puddles:

Friend got hacked without clicking any malicous links

someone added him pretneding to be steam support but hes not dumb so just ignored them while in game and blocked them instantly when he had time, but as soon as he blocked them he got logged out of his steam and they hijacked his account, he got it back by changing email password ect, but any ideas how they even hacked him. he just recently unboxed some good skins on cs so im thinking he might have been compromised for a long time but they didnt care do do anything until he had something of worth

Tell your friend to secure his account.

Do not trade until your account is secured.

Take the following steps to secure your account:

1. Scan for malware. If you don't have a malware scanner use https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices. https://steamhost.cn/twofactor/manage
4. Change passwords from a clean computer.
5. Generate new backup codes for your Mobile App. https://steamhost.cn/twofactor/manage
6. Revoke the API key (there should be no key). https://steamhost.cn/steamcommunity_com/dev/apikey


Did your friend use any third-party sites for trading or gambling?

the only site he has used was csfloat to buy a knife and the hacker first logged into his steam acount a week ago to this day, i got him to do a malewarebytes scan before changing his password, do you think he should still change password from another computer

Originally posted by Puddles:

the only site he has used was {removed} to buy a knife and the hacker first logged into his steam acount a week ago to this day, i got him to do a malewarebytes scan before changing his password, do you think he should still change password from another computer

He should at least deauthorize all other devices.

The site you mentioned can not be trusted.

All third-party sites are use at own risk. Never enter your Steam password on a third-party site!


Was something stolen?

Originally posted by Lilim:

Originally posted by Puddles:

the only site he has used was {removed} to buy a knife and the hacker first logged into his steam acount a week ago to this day, i got him to do a malewarebytes scan before changing his password, do you think he should still change password from another computer

He should at least deauthorize all other devices.

The site you mentioned can not be trusted.

All third-party sites are use at own risk. Never enter your Steam password on a third-party site!


Was something stolen?

nothing was stolen he changed his password the reset the authenticator instantly but cant log in now becuase he denied the login on authenticator lol, do you know the cooldown on that

Originally posted by Puddles:

nothing was stolen he changed his password the reset the authenticator instantly but cant log in now becuase he denied the login on authenticator lol, do you know the cooldown on that

What do you mean by "reset the authenticator"? Did he remove the authenticator and added it again?

What error messages does he get?

Originally posted by Lilim:

Originally posted by Puddles:

nothing was stolen he changed his password the reset the authenticator instantly but cant log in now becuase he denied the login on authenticator lol, do you know the cooldown on that

What do you mean by "reset the authenticator"? Did he remove the authenticator and added it again?

What error messages does he get?

yeah removed it and added it back to the same phone, it says to many failed attempts when he tries to login

Originally posted by Puddles:

yeah removed it and added it back to the same phone, it says to many failed attempts when he tries to login

Removing the authenticator was unnecessary.

He can try to use a different device or a different browser to log in. If that is not working he has to wait. Unfortunately, I don't know how long the cooldown is.