Steam account hack attempt

Discussion in 'General Gaming' started by kirbyrj, Jan 12, 2018.

  1. kirbyrj

    kirbyrj Why oh why didn't I take the BLUE pill?

    Messages:
    23,078
    Joined:
    Feb 1, 2005
    I got an e-mail today saying that somebody had my username and password for Steam and was trying to login from Russia. It sent me the email with the code to log in from a new device. I promptly went into steam and changed my password. Anyone else have issues like this recently?
     
  2. MikeRotch

    MikeRotch Limp Gawd

    Messages:
    376
    Joined:
    Aug 23, 2013
    This happens to a few of my friends. Every so often they either get a Chinese or Russian hacker. For them, it's not a one off experience. Hasn't happened to me yet though. *knock on wood*
     
  3. magnetik

    magnetik Moderator Staff Member

    Messages:
    6,318
    Joined:
    Jun 6, 2000
  4. Stoly

    Stoly [H]ardness Supreme

    Messages:
    5,928
    Joined:
    Jul 26, 2005
    It happened to me with Origin. Fortunately I got it back in no time.
     
    kirbyrj likes this.
  5. kirbyrj

    kirbyrj Why oh why didn't I take the BLUE pill?

    Messages:
    23,078
    Joined:
    Feb 1, 2005
    How does it work? Enter a code from your phone every time you log in to steam?
     
    Kyle_Bennett likes this.
  6. magnetik

    magnetik Moderator Staff Member

    Messages:
    6,318
    Joined:
    Jun 6, 2000
    no.. only anytime you (or someone nefarious) tries to reinstall or login and use your account that it doesn't recognize... it forces you to use the authenticator to register a new pc.
     
  7. kirbyrj

    kirbyrj Why oh why didn't I take the BLUE pill?

    Messages:
    23,078
    Joined:
    Feb 1, 2005
    Ah ok. I have it set up to just do it via email.
     
  8. owcraftsman

    owcraftsman Gawd

    Messages:
    737
    Joined:
    Feb 3, 2007
    Ya I got three such emails in the last two weeks changed pass word on the 1st one and ignored the rest. 2FA is a good solution.
     
  9. Doward

    Doward [H]ard|Gawd

    Messages:
    1,543
    Joined:
    Jul 3, 2004
    This is what 2 factor authentication is all about.

    You CLAIM you are who you are - now PROVE it.
     
    Armenius likes this.
  10. polonyc2

    polonyc2 [H]ardForum Junkie

    Messages:
    15,223
    Joined:
    Oct 25, 2004
    all I have is Steam Guard enabled and never had any issues...they ask me to authenticate by sending a code to my e-mail every time I reformat my computer and re-install Steam
     
    Armenius likes this.
  11. MavericK

    MavericK Zero Cool

    Messages:
    31,205
    Joined:
    Sep 2, 2004
    It happens...exactly what 2FA is for, as others have stated. I have Steam Guard and the Steam app on my phone, easy and works great.
     
    Armenius likes this.
  12. Cmustang87

    Cmustang87 [H]ardness Supreme

    Messages:
    4,290
    Joined:
    Oct 4, 2007
    • Something you know
    • Something you have
     
    Last edited: Jan 14, 2018
    Doward likes this.
  13. marka211

    marka211 [H]Lite

    Messages:
    126
    Joined:
    Oct 1, 2000
    So after reading this thread because I was having the same problem and I had Steam set to just email me. I changed it and set it up with Steam Guard Mobile Authenticator. It even says that if I go to the Steam account page on the computer, I did that Friday night. So I get up this morning and I have another email that someone in CN, I assume that means China has tried getting in my account and it looks just like that ones before with the code that they need to login. Did I miss something or it takes a few days to take effect?
     
  14. Cmustang87

    Cmustang87 [H]ardness Supreme

    Messages:
    4,290
    Joined:
    Oct 4, 2007
    You will still get email notifications for suspicious login activities, especially from high-risk geo-IP addresses.

    Did you change your password?
     
  15. thenjduke

    thenjduke Limp Gawd

    Messages:
    366
    Joined:
    Jul 24, 2007
    I had this happen to me about month ago! I called them and they block the ip
     
  16. TrailRunner

    TrailRunner Limp Gawd

    Messages:
    351
    Joined:
    Feb 15, 2012
    Same thing happened to me last week. As others have mentioned, 2FA ftw
     
  17. thenjduke

    thenjduke Limp Gawd

    Messages:
    366
    Joined:
    Jul 24, 2007
    Just make sure to make password strong as possible and do not use the same password for other accounts. I learn this the hard way last year. It sucks when it happens. A friend of mine went through it and took her a year to clear it all up.!
     
    Armenius and Cmustang87 like this.
  18. mdma11

    mdma11 Limp Gawd

    Messages:
    218
    Joined:
    Nov 5, 2013
    Same here. Is that not sufficient to prevent someone from logging into your account even if they have hacked your password?
     
  19. kirbyrj

    kirbyrj Why oh why didn't I take the BLUE pill?

    Messages:
    23,078
    Joined:
    Feb 1, 2005
    Usually I get an email if I log in from a new device. This is what happened to me.
     
  20. Armenius

    Armenius [H]ardForum Junkie

    Messages:
    15,505
    Joined:
    Jan 28, 2014
    I would change both my Steam password and my e-mail password should this happen to me. But just because they tried to login doesn't mean they can.
     
  21. polonyc2

    polonyc2 [H]ardForum Junkie

    Messages:
    15,223
    Joined:
    Oct 25, 2004
    2FA is just an extra layer of protection...I personally think Steam Guard is good enough...even if someone gets my user name and password they won't be able to log in because Steam Guard will send me an e-mail code that needs to be input
     
  22. thenjduke

    thenjduke Limp Gawd

    Messages:
    366
    Joined:
    Jul 24, 2007
    I am happy with steam guard! It is good as I only log on from my one gaming PC and tell it not to ask again!
     
    Chapeau likes this.
  23. Chapeau

    Chapeau Gawd

    Messages:
    731
    Joined:
    Jul 17, 2016
    Totally agree - it's pretty pain free to use it.
     
  24. Kongar

    Kongar Gawd

    Messages:
    721
    Joined:
    Oct 25, 2004
    So about two weeks ago the exact same thing happened to me - except the IP was in China. 2FA resulted in me getting a notification from steam that something fishy was going on. However, that username/password combination, while strong, was reused like - everywhere. It quickly became clear that combination was being tried everywhere with iterations on the password (add an ! or a number). All in all, I had to consider that good password and all it's variants "burned." I had to change hundreds of passwords - what a major PITA...

    I moved to lastpass and did the "let it generate a crazy non-rememberable password" thingy. I'm secure now, but I've got to be honest - the password thing is now a pretty big pain. There's got to be a better way.

    TLDR - similar thing happened to me - but they targeted all kinds of things with that combo. No idea how they got it, but someone was trying to break into every institution in the world with the username/pass combo. Had to change everything...
     
  25. knstyl

    knstyl n00bie

    Messages:
    13
    Joined:
    Jul 31, 2012
    I get these emails all the time. I've gotten complacent with steam guard in place and haven't bothered changing the password at all. Woo for steam guard.
     
  26. owcraftsman

    owcraftsman Gawd

    Messages:
    737
    Joined:
    Feb 3, 2007
    Turns out I had two accounts same email different user names. After changing the password on the old account I had forgotten about the emails stopped. I was then able to add it to my family list to combine games. To be clear I was getting the assumed hacking attempt email daily sometimes twice per day. All has stopped after the password reset on the old username/account. Hope this helps.