Jeezus thieving shits ...
Anyone had this happen to them - what kind of pain is involved in getting it back via steam ? 200+ games I cant get to any longer. :knuppel2: :knuppel2: :knuppel2: :knuppel2: :knuppel2: :knuppel2:
Tracked IP address someone in Ukraine ...
:o
Oh crap
No idea I'm afraid. I hope it's not too painful for you to get it back.
Did you have Steam Guard on? It basically means (I think) you get a text with a code for things that change. Obviously this won't help you now - I'm trying to work out whether there's a flaw in that so I can determine if I have to take action.
Get in touch with STEAM ASAP. Open a ticket ASAP and have anything that identifies you as the original account holder handy such as how you have paid for most of your games.
Here's the STEAM ACCOUNT STOLEN guide page: https://help.steampowered.com/en/wizard/HelpWithAccountStolen
Once you clear all this up, I highly recommend Steam Guard.
Quote from: Staggerwing on October 06, 2017, 05:29:02 PM
Get in touch with STEAM ASAP. Open a ticket ASAP and have anything that identifies you as the original account holder handy such as how you have paid for most of your games.
Here's the STEAM ACCOUNT STOLEN guide page: https://help.steampowered.com/en/wizard/HelpWithAccountStolen
Thanks - yes done this now ....
Quote from: BanzaiCat on October 06, 2017, 05:30:06 PM
Once you clear all this up, I highly recommend Steam Guard.
Yes lesson learned ... have TFA on my Paypal after a breach. Will enable steam guard - just a pain having to have my mobile to hand every time I want to login.
Hopefully I get it all back.
Actually have a free night and was looking forward to some gaming instead have to deal with this crap. I just wish there was a big red button I could press to make all the thieving scum of this world disappear in a puff of smoke. I would have absolutely no problem in pressing it.
Good luck man.
Yeah, it sucks. I've had my identity stolen twice in the last 15 years, but not from online stuff. Trust me, I know how much of a pain it is.
I won't ever assign CC or account info to Steam. I think you guys have reported it happening there once every couple of years. I just don't want/need to take that chance for the convenience of having my paid info on file with them.
Quote from: BanzaiCat on October 06, 2017, 05:43:58 PM
Yeah, it sucks. I've had my identity stolen twice in the last 15 years, but not from online stuff. Trust me, I know how much of a pain it is.
I won't ever assign CC or account info to Steam. I think you guys have reported it happening there once every couple of years. I just don't want/need to take that chance for the convenience of having my paid info on file with them.
Yeah took all my CC details down a while back. Only linked to my Paypal account now but I have TFA on that so have to login and enter a text code to process that so as safe as it can be.
Wild. Really nightmarish.
Quote from: Jarhead0331 on October 06, 2017, 05:50:48 PM
Wild. Really nightmarish.
Yeah - and he changed the email address on my account. But to do that they send a code to the registered mail address. It doesn't help steam store the registered email in plan text in the account details - but I am guessing he must have hacked my email as well to get at the code that was sent. But essentially he robbed me of 200+ games with a couple of passwords.
Brave new world man...
Just reinforces the universal constant:
"People are a**holes"
^yeah
Just as a re-assurance: once steam guard is activated you only need your mobile the first time you login on a new device or browser. So it isnt much of a hassle.
Really sorry to hear this.
Well - credit to steam support - all back and working - thanks - now busy enabling steam guard mobile. Thanks for the advice here.
Phew !!!
Quote from: Yskonyn on October 06, 2017, 08:03:33 PM
Just as a re-assurance: once steam guard is activated you only need your mobile the first time you login on a new device or browser. So it isnt much of a hassle.
Yes you are right thinking about it ... had the email version on but obviously no use if they get at your mail account as well. Having been bitten I will set up the mobile but was leery of it being an app on the phone rather than just a text message with a code. But will install it anyhow now.
Quote from: Zulu1966 on October 07, 2017, 03:07:20 AM
Well - credit to steam support - all back and working - thanks - now busy enabling steam guard mobile. Thanks for the advice here.
Phew !!!
Excellent O0
I remember the days when Steam Support was completely AWOL :'(
If they managed to hack both your email and Steam accounts, chances are that they've done it by hacking whatever computer you logged into both of these from.
I'd recommend doing a full good scan with a quality anti-virus, and possibly reconsider reformatting the device.
Always a good idea to have different passwords for all your important accounts. So Email, Finance, Medical, 401k.. Steam.. All different passwords..
Quote from: Tuna on October 07, 2017, 12:35:34 PM
Always a good idea to have different passwords for all your important accounts. So Email, Finance, Medical, 401k.. Steam.. All different passwords..
Yes mistake I made. Now everything will be 23 characters long and different.
I just use different combination of car license plates, kids Initials and a favorite symbol or two.. Then I have a word document that gives me hints based on those on what the passwords are (so pretty much, only I would understand what the hints were).
Quote from: BanzaiCat on October 06, 2017, 05:43:58 PM
Yeah, it sucks. I've had my identity stolen twice in the last 15 years, but not from online stuff. Trust me, I know how much of a pain it is.
I won't ever assign CC or account info to Steam. I think you guys have reported it happening there once every couple of years. I just don't want/need to take that chance for the convenience of having my paid info on file with them.
[/quote!
One time use steam cards. I estimate close to three thousand dollars in the last six years. I have kept them all, 20's, 50's, and the rare 100's in my desk drawer. Pretty impressive stack!
The idea of someone hacking into a Steam account is pretty scary. Was this someone you had had contact with, or did they get a hold of your account some other way?
Changed my password because of this. Glad it worked out Zulu. O0
Quote from: Philippe on October 07, 2017, 03:00:42 PM
The idea of someone hacking into a Steam account is pretty scary. Was this someone you had had contact with, or did they get a hold of your account some other way?
No. I had steam guard on but only via email. So obviously he had my user name which is publicly available couple that with a poor password and he was in. As I said earlier once into that steam store email address in plain text. So he could then try and hack that to intercept the codes that were sent to authorise the the changes they made.
The IP address that did this was somewhere in the Ukraine. So apart from the fact that he was a thieving scumbag largely an issue with my poor password security.
Still a salutary lesson to be a bit more robust with things and take advantage of the additional security features on offer which I will be doing.
never use one-word passwords. Use combination of capitals, numbers, spaces and special characters.
Your password is
password = cracked instantly
1234 = cracked instantly
Kylie = cracked in 10 milliseconds
taurus1966 = cracked in 1 day
Pass_LikE&&THI5 = 16 billion years
CaptialS spaces &specialCaractErs$1 = cracked in 2 sexdecillion years
link: https://howsecureismypassword.net/
also, use a physical notebook.
^ Nice site, Ian C. My Steam password would take 100 years to crack so I feel relatively safe. My other passwords are upwards of 16 billion years to crack so I should be good I hope.
Quote from: BanzaiCat on October 08, 2017, 07:42:58 AM
^ Nice site, Ian C. My Steam password would take 100 years to crack so I feel relatively safe. My other passwords are upwards of 16 billion years to crack so I should be good I hope.
Oh how you underestimate the little Russian hacker kids. >:D
Hackers use a 'Brute Force' attack to crack your password. They will use an app that repeatedly tries various passwords but this can easily be defeated by websites that disallow multiple login attempts within seconds or having a really strong password that isn't obvious and uses upper, lower case, spaces and special characters. The Brute Force attack is pretty old hat though.
More likely, the hack is through a trojan virus. Once a PC is infected, it's an easy task for a hacker to steal whatever they like. This is why you need to have a Firewall and Antivirus software installed and working at all times.
However, in the case of Zulu1966, I'm guessing his original password for mail and STEAM account was something really simple to guess, like 'password' or his star sign or similar. The hacker used a simple method and got lucky. Sadly, a lot of people get stung this way. Glad you got things fixed Zulu.
Yeah, this thread inspired me to change both my Steam account and my Amazon account passwords.
^ Me, too. No point in tempting fate. I haven't changed them in a very long time, but I need to get into the habit of changing them every few months.
Damn. I'm using that password site above and getting nervous.
Quote from: Gusington on October 08, 2017, 01:10:54 PM
Damn. I'm using that password site above and getting nervous.
It would make me a little nervous just typing in my password to some random internet website.
Quote from: trailrunner on October 08, 2017, 01:12:27 PM
Quote from: Gusington on October 08, 2017, 01:10:54 PM
Damn. I'm using that password site above and getting nervous.
It would make me a little nervous just typing in my password to some random internet website.
This
Quote from: trailrunner on October 08, 2017, 01:12:27 PM
Quote from: Gusington on October 08, 2017, 01:10:54 PM
Damn. I'm using that password site above and getting nervous.
It would make me a little nervous just typing in my password to some random internet website.
Don't. Type in similar ones.
Quote from: bbmike on October 08, 2017, 01:41:06 PM
Quote from: trailrunner on October 08, 2017, 01:12:27 PM
Quote from: Gusington on October 08, 2017, 01:10:54 PM
Damn. I'm using that password site above and getting nervous.
It would make me a little nervous just typing in my password to some random internet website.
Don't. Type in similar ones.
That
I found that putting just one more non-alpha in my pseudo password increased the cracking time factor by several hundred over what it was before.
yesterday = 2 minutes
Yesterday = 19 hours
Y3sterday = 4 days
Y3st.erday = 10 years
Y3st.erda_y = 5 thousand years
Y3st.erda_y*& = 47 million years
I'm good with 47 million years.
Makes all your troubles seem so far away...
Quote from: Ian C on October 08, 2017, 12:25:04 PM
Hackers use a 'Brute Force' attack to crack your password. They will use an app that repeatedly tries various passwords but this can easily be defeated by websites that disallow multiple login attempts within seconds or having a really strong password that isn't obvious and uses upper, lower case, spaces and special characters. The Brute Force attack is pretty old hat though.
More likely, the hack is through a trojan virus. Once a PC is infected, it's an easy task for a hacker to steal whatever they like. This is why you need to have a Firewall and Antivirus software installed and working at all times.
However, in the case of Zulu1966, I'm guessing his original password for mail and STEAM account was something really simple to guess, like 'password' or his star sign or similar. The hacker used a simple method and got lucky. Sadly, a lot of people get stung this way. Glad you got things fixed Zulu.
Not quite as simple as password but similar. Didn't help it was the same as my mail either. As I say lesson learned. 😏