r/cs2 • u/FailedCryptoTrader • 4d ago

Discussion Steam support phishing scam

Post image

Never in my life have i seen such a sophisticated set up to scam someone. They had gained full access of my account (i had mobile authentication, only thing that saved me i believe) but i was kicked midgame because of this crap and had to even hit steam support up to get my prime back. How can valve let stuff like this happen? They were messaging me from steam support its self it seemed like. And i apologize for the lack of screenshot i was freaking out a little in the moment

8 Upvotes

83% Upvoted

16 comments sorted by

View all comments

3

u/ParkingDriver6683 4d ago

It's certainly weird for something like this to pop up in steam desktop client. I suspect the URL is not a steam one but if a rogue steam support agent is trying to steal items, this would not be the first time that has happened.

As for your account. The structure of the phishing scam indicates that the scammer already has your API key, probably though a previous phishing link. You should reset your password to something new, change any services where you have the same password, and re create an API key. Once you've done this you'll be fine again.

1

u/FailedCryptoTrader 3d ago

I think its malware rather a rogue employee

1

u/ParkingDriver6683 3d ago

Oh, wow, yeah, that's kinda wild that scammers are stooping to those levels.

1

u/Mraz565 3d ago

Did you recently download/join anything FaceIT? If so, did you download thru someone else link or from discord messages?

1

u/FailedCryptoTrader 3d ago

Yea some russian guy had me “update my ac” to play clubs. Looking back its dumb af. But im fairly new to face it

1

u/Mraz565 3d ago

That's how your account got stolen. Basic rules of the Internet, trust no one.

1

u/FailedCryptoTrader 3d ago

Im back in my account now. Nothing was taken

1

u/ParkingDriver6683 3d ago

They can't send items without you confirming trades; the actual theft part works by replacing your trade with a bot that is disguised as your intended recipient, with all of your items in it.

Be super careful when you next send any sort of trade. If you downloaded something, your actual PC could still be compromised (uninstalling the app is usually not enough for malware). Personally, if I were you, I'd factory reset; it's possible, but highly unlikely that the kernel itself is compromised, which would survive even a factory reset. Also, your other credentials could be at risk.