STEAM GROUP
Steam Client Beta SteamBeta
Join Group
STEAM GROUP
Steam Client Beta SteamBeta
404,781
MEMBERS
8,287
IN-GAME
59,318
ONLINE
Founded
January 8, 2013
Overview Announcements Discussions Events Members Comments
The Firebrand Dec 26, 2024 @ 4:16am
Received a bunch of emails from [email protected] that say "YOU'VE GIVEN AN AWARD! "
Title. I received 25 emails from [email protected] and they say
STEAM POINTS USED
YOU'VE GIVEN AN AWARD!

etc etc. They seem legit. I looked up the message source and ran it through chat gpt which thinks its legitimately from steam with the correct IP and domains.

I changed my pass, checked APIs (none), there's no money spent, not even shop points spent for award in my transaction and redemption history.

What do you guys think happened? A) Was it a spoof email? B) Was it phishing somehow? C) Did someone actually access my account ( I have 2FA ) and try to spend my points but steam revoked the transactions somehow? Something else?
< >
Showing 1-5 of 5 comments
cSg|mc-Hotsauce Dec 26, 2024 @ 7:44am 
Check your points summary under the Total Redeemed line (click on View Details) to see if your account sent them.

https://store.steampowered.com/pointssummary/

:nkCool:
#1
The Firebrand Dec 26, 2024 @ 11:39am 
I believe my steam was indeed hacked but they couldn't do anything that requires 2FA.

There's nothing in the redeemed points summary. I think it got rollback'ed once the attacker was detected. They managed to send a "Killing Floor Gift" from my inventory to some empty account with just CSGO. The emails that said the awards were sent to a couple accounts, all of which had 400-500 awards of each type.
#2
cSg|mc-Hotsauce Dec 26, 2024 @ 11:50am 
Originally posted by The Firebrand:
I believe my steam was indeed hacked but they couldn't do anything that requires 2FA.

There's nothing in the redeemed points summary. I think it got rollback'ed once the attacker was detected. They managed to send a "Killing Floor Gift" from my inventory to some empty account with just CSGO. The emails that said the awards were sent to a couple accounts, all of which had 400-500 awards of each type.

It wasn't due to detection of the hijacker.

The moment you changed your password, the recent awards were revoked and the points were returned to you. There is a grace period of 2 weeks where you can change/reset your password to revoke awards sent by your account.

:nkCool:
#3
Lecadre Dec 12 @ 8:56am 
i had this randomly happening to me too saying that i gave awards to this persons profile (maybe they are a hacker/hijacker) https://steamcommunity.com/profiles/76561199222518241

,not sure how steam accounts get hacked so easily, i am not even active on steam or have steam installed, but i already changed the password
Last edited by Lecadre; Dec 12 @ 9:10pm
#4
cSg|mc-Hotsauce Dec 12 @ 1:55pm 
Originally posted by Lecadre:
i had this randomly happening to me too saying that i gave awards to this persons profile (maybe they are a hacker/hijacker) https://steamcommunity.com/profiles/76561199222518241

,not sure how steam accounts get hacked so easily, i am not even active on steam or have steam installed

Secure your account. All steps...

Scan for malware. https://www.malwarebytes.com/ or with whatever.

Deauthorize all devices https://store.steampowered.com/twofactor/manage

Change your password on a secure device.

Generate new back up codes. https://store.steampowered.com/twofactor/manage

Revoke the api key (this should be empty) https://steamcommunity.com/dev/apikey

The 3rd step should revoke any awards recently given.

:nkCool:
#5
< >
Showing 1-5 of 5 comments
Per page: 1530 50

All Discussions > General Discussions > Topic Details
Date Posted: Dec 26, 2024 @ 4:16am
Posts: 5
Start a New Discussion

Discussions Rules and Guidelines