Sogo70 3. juli kl. 18:20
Protect PRIME Status After Account Recovery in CS2
Hello Valve team and Steam community,

I'd like to suggest an important improvement to the security system related to PRIME status in CS2, especially in cases of compromised accounts.

There have been many reports from players who fell victim to scams (like phishing, fake links, or account takeovers) and had their PRIME status removed by hackers. The most serious issue is that even after successfully recovering their accounts through Steam Support, the PRIME status is not restored. This is extremely frustrating and reveals a serious weakness in the system.

Suggestion:
It’s important to strengthen PRIME status protection so that hackers cannot remove it. In CS:GO, this was never an issue, but now in CS2 the system seems weaker and more vulnerable. PRIME needs stronger safeguards, especially when the account is compromised or has just been recovered.

PRIME is a paid and essential feature for serious CS2 players. It’s unfair that an attacker can remove it and the rightful owner has no way to get it back — even after verifying their identity and recovering the account.

This improvement would bring more security, trust, and fairness to the entire community that invests time and money into the game.

Thank you for your attention, and I hope this suggestion will be considered!
< >
Viser 1-8 af 8 kommentarer
datCookie 3. juli kl. 18:24 
What extra security measures do you suggest Valve implement that cannot be disabled or easily bypassed by a hijacker?

Steam doesn't know whether activity on an account is being made by the owner or someone else.

I've seen people complain about things like 2FA, steamguard, etc, not being enough because hijackers can just bypass them once they're in.

The problem is with the user, not the system.
Sidst redigeret af datCookie; 3. juli kl. 18:24
Sogo70 3. juli kl. 18:33 
Oprindeligt skrevet af datCookie:


What extra security measures do you suggest Valve implement that cannot be disabled or easily bypassed by a hijacker?

Steam doesn't know whether activity on an account is being made by the owner or someone else.

I've seen people complain about things like 2FA, steamguard, etc, not being enough because hijackers can just bypass them once they're in.

The problem is with the user, not the system.
Many people don’t pay enough attention to account security and end up falling victim to scams. When a hacker takes over an account, they can remove the PRIME status in CS2. How is this possible? How can a hacker remove PRIME from someone’s account? This is a serious problem!

It’s very frustrating that even after recovering the account, the PRIME status is not automatically restored. We urgently need a solution to prevent hackers from removing PRIME and to allow rightful owners to recover this status without difficulties.
They won't change it. You are responsible for the security of your account and all actions on your account. Do you know why this policy exists?

https://steamhost.cn/steamcommunity_com/discussions/forum/9/2996547001746207416/?ctp=5#c2996547001745305874

Because cheaters ruined the it wasn't me. It was the hacker excuse a long time ago


No, they don't pay enough attention to security and whose fault is that?


Valve explains it concisely in the Steam Subscriber Agreement:

You are responsible for the confidentiality of your login and password and for the security of your computer system. Valve is not responsible for the use of your password and Account or for all of the communication and activity on Steam that results from use of your login name and password by you, or by any person to whom you may have intentionally or by negligence disclosed your login and/or password in violation of this confidentiality provision.

https://steamhost.cn/subscriber_agreement/


You agree to that when you create the account, everyone does and they are not going to change it again.
And you can add it back to the account even if they remove it as well


The only solution is to stop giving out your account login information. This is the only way accounts are hijacked and it is the way that they are removing prime from the account.

You are warned not to click links and not to give out your password to anyone


https://steamhost.cn/help_steampowered_com/en/faqs/view/6639-EB3C-EC79-FF60
Sidst redigeret af C²C^Guyver |NZB|; 3. juli kl. 18:50
After you have fully secured your account, you can restore Prime whenever.

1. Go here https://steamhost.cn/help_steampowered_com/en/

2. Scroll down and enter the name of the game in the search bar.

3. Click on the game.

4. Select "It's not in my library"

5. Select "Restore the previously removed package to my account."

:nkCool:
I was looking for that link lol
Reaper 3. juli kl. 19:09 
The weakness in the system is the user. If you don't log into sketchy sites, then the rest of the problems solve themselves.
Steps to take NOW:
1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://steamhost.cn/twofactor/manage
3. Change passwords from a trusted/clean computer.
4. Generate new backup codes for your Mobile App https://steamhost.cn/twofactor/manage
5. Revoke the API key https://steamhost.cn/steamcommunity_com/dev/apikey (there should be nothing in the APIKEY)


Please review how you are logging into Steam, you somehow gave away your log-in information. This could of been due to the computer being compromised and redirecting to a fake log-in, or you using a third party site to log in to Steam.

Once you are sure you have regained control, you can start trading again. Please triple check any trades you make to be sure they are going to the correct account.

After you have secured the account, please edit your profile back to normal, if it was altered by the hijacker/scammer
< >
Viser 1-8 af 8 kommentarer
Per side: 1530 50