所有讨论 > Steam 论坛 > Steam Discussions > 主题详情
Dosendusche 11 月 4 日 下午 6:17
I almost got scammed today
I almost never get scammed but today was the day and it was very close. After a long and exhausting day at work it was very convincing to me because i don't know how steam support would normally contact you. Basically never having issues here...
Anyway i found my account blank, all my friends blocked, my profile pic removed, profile completely blank and stuff. Ducking scary if you ask me. So one guy impersonated a steam employee and asked me a lot of stuff about my account because he wanted to "verify it was me". You might already see where this goes but let me explain. They could also "uninstall" games from my pc. With that they wanted to "verify" that they are real. I asked multiple timesbif they could provide any proof like sending me a mail from a steampowered domain. They never did... so yeah i'm stupid i know. I just realised, after they asked me to join a family sharing thing as child (like wtf?! WHY would steam support need to do this.), that everything they did is possible having a session token and access to the api. So i called the bluff reset my password and got to damage control. Funny enough no real damage done because of steam protection stuff.
But how did they get the session token? Well windows defender found a virus and deleted it just in time before I changed my password. A lot of work for something worth 20 bucks or whatever. I will now reinstall my operating system maybe it is time for me to switch to a linux dist after all.

Experienced users might laugh at me and completely rightful so as i realised how ♥♥♥♥♥♥♥ scammy everything of that sounds. Anyway lesson learned.

Be safe out there, don't be so stupid like me, don't get scammed guys.
该主题的作者已标记一个回帖作为问题的解答。
点击这里跳转至那一条帖子。
引用自 Lilim:
引用自 Dosendusche：
...everything they did is possible having a session token and access to the api. So i called the bluff reset my password and got to damage control...

Take all of the following steps to secure your account:

1. Scan for malware. If you don't have a malware scanner use https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices. https://psteamproxy.yuanyoumao.com/twofactor/manage
4. Change passwords from a clean computer.
5. Generate new backup codes for your Mobile App. https://psteamproxy.yuanyoumao.com/twofactor/manage
6. Revoke the API key (there should be no key). https://psteamcommunity.yuanyoumao.com/dev/apikey
< >
正在显示第 1 - 13 条，共 13 条留言
Ben Lubar 11 月 4 日 下午 6:19 
引用自 Dosendusche：
I almost got scammed today
Congratulations on not quite getting scammed today!
#1
cSg|mc-Hotsauce 11 月 4 日 下午 7:14 
Basically everything mentioned on every official Valve employee profile page...?

https://psteamcommunity.yuanyoumao.com/id/pilor

:nkCool:
#2
Dosendusche 11 月 5 日 上午 12:32 
引用自 cSg|mc-Hotsauce：
Basically everything mentioned on every official Valve employee profile page...?

https://psteamcommunity.yuanyoumao.com/id/pilor

:nkCool:

I'm stupid yes.
I did not know, now i know. Thank you. I just use this to play games after work.
#3
Dan5000 11 月 5 日 上午 12:59 
It is basically the same for every kind of platform in every kind of environment. No specific knowledge for Steam, but basic knowledge for navigating the internet.
#4
该讨论串的作者已表示此帖子解答了原先的主题。
Lilim 11 月 5 日 上午 3:58 
引用自 Dosendusche：
...everything they did is possible having a session token and access to the api. So i called the bluff reset my password and got to damage control...

Take all of the following steps to secure your account:

1. Scan for malware. If you don't have a malware scanner use https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices. https://psteamproxy.yuanyoumao.com/twofactor/manage
4. Change passwords from a clean computer.
5. Generate new backup codes for your Mobile App. https://psteamproxy.yuanyoumao.com/twofactor/manage
6. Revoke the API key (there should be no key). https://psteamcommunity.yuanyoumao.com/dev/apikey
#5
Dosendusche 11 月 5 日 上午 3:58 
引用自 Dan5000：
It is basically the same for every kind of platform in every kind of environment. No specific knowledge for Steam, but basic knowledge for navigating the internet.
You are correct of course but: having a session token and using it to do stuff/to scam that user might actually be steam specific as far as i know. On GOG this kinda stuff would not really work, on social media your account just starts posting weird ♥♥♥♥.
Not every platform has a public api that can be used to trick a user. I guess very few have that.
I think this specific attempt is very much steam only.

On the other hand loosing a session token could do much more damage on other platforms if they are not that secure. Since apparently they could not login to the steam account with just that token. Better than most platforms. loosing the session token is basically on me not checking for viruses before that.
#6
deeper 11 月 5 日 上午 4:01 
OP, do you know where you picked up the virus?
#7
Dosendusche 11 月 5 日 上午 4:26 
引用自 deeper：
OP, do you know where you picked up the virus?
Yes sadly i do know. Yes i will just wait for next steam sale instead.:lkbc_kitty:
#8
Dosendusche 11 月 5 日 上午 4:28 
引用自 Lilim：
引用自 Dosendusche：
...everything they did is possible having a session token and access to the api. So i called the bluff reset my password and got to damage control...

Take all of the following steps to secure your account:

1. Scan for malware. If you don't have a malware scanner use https://www.malwarebytes.com/
2. Check that the email and phone number on the Steam account are still yours.
3. Deauthorize all other devices. https://psteamproxy.yuanyoumao.com/twofactor/manage
4. Change passwords from a clean computer.
5. Generate new backup codes for your Mobile App. https://psteamproxy.yuanyoumao.com/twofactor/manage
6. Revoke the API key (there should be no key). https://psteamcommunity.yuanyoumao.com/dev/apikey
Ah yes malwarebytes. Totally forgot that name thank you for linking that again. I did it with windows defender for now but the other stuff is done.
#9
Lilim 11 月 5 日 上午 4:30 
引用自 Dosendusche：
引用自 deeper：
OP, do you know where you picked up the virus?
Yes sadly i do know. Yes i will just wait for next steam sale instead.:lkbc_kitty:

What do you mean? Has the scammer "removed" games from your account?
#10
Dosendusche 11 月 5 日 上午 4:34 
引用自 Lilim：
引用自 Dosendusche：
Yes sadly i do know. Yes i will just wait for next steam sale instead.:lkbc_kitty:

What do you mean? Has the scammer "removed" games from your account?
No they didn't. You know i tried to dust off the old pirate hat but i'm too old now i don't understand that kind of stuff anymore i guess. That is what got me.
#11
Lilim 11 月 5 日 上午 4:37 
Okay, I got it now :hp_kyu:.
#12
deeper 11 月 5 日 上午 5:01 
引用自 Dosendusche：
Yes sadly i do know. Yes i will just wait for next steam sale instead.:lkbc_kitty:
Well, better to know and learn than walk straight into it again without realising the risks, and any software installation from a non-reputable source really is a crap shoot.
#13
< >
正在显示第 1 - 13 条，共 13 条留言
每页显示数： 1530 50

所有讨论 > Steam 论坛 > Steam Discussions > 主题详情
发帖日期： 11 月 4 日 下午 6:17
回复数： 13
发起新讨论

讨论规则及指引