If you have access to the account

Steps to take NOW to secure the account:
1. Scan for malware https://www.malwarebytes.com/
2. Deauthorize all other devices https://steamhost.cn/twofactor/manage
3. Change passwords from a clean computer
4. Generate new backup codes for your Mobile App https://steamhost.cn/twofactor/manage
5. Revoke the API key https://steamhost.cn/steamcommunity_com/dev/apikey (there should be nothing in the APIKEY)
6. If points were stolen, do a password RESET to cancel the awards/points before they are delivered




If you have lost access to the account

Account Recovery
Make sure you are completely logged out of Steam before you start the recovery process


https://steamhost.cn/help_steampowered_com/en/wizard/HelpWithAccountStolen
https://support.steampowered.com/kb_article.php?ref=2347-qdfn-4366

When doing an account recovery, do not try to rush thru the process. Trying to rush thru normally results in information being missed and time wasted. Take your time and read everything.

Here is a guide that another Steam user was kind enough to make. It will help you navigate your way thru the recovery process if you are having any problems.
https://steamhost.cn/steamcommunity_com/sharedfiles/filedetails/?id=1126288560

Originally posted by UnKnown:

i've been hacked please help...
someone's hacking me to send scam links for steam card gifts in friends dms

And that's why I don't do trades or accept unknown links on Steam with people I don't know.

Best to just do it with people you know instead.