I had some skins in CS:GO which were recently traded to a random profile “by me”. When i wrote a ticket to Steam support it was closed again “by me”.
That’s when i knew they were still in my Steam profile so i wanted to change my steam password/email asap.
That’s when things got even more interesting. When i was checking on the security code in my mail app (code to change my credentials) i noticed my phone took a screenshot by itself, and when i entered that code it was already incorrect. So I realized that they were also using my phone at this point. Nothing else was taken, no money from my banking apps (revolut etc) just a few CS:GO skins. I instantly factory reseted my phone without any app or data recovery, just signed back into iCloud. Since then I managed to change all of my passwords (including steam), and i reopened a ticket which stayed open as of now.
My flatmate even said we should reset the router, which we did. Are there any other steps i should take ? I’m not really experienced in any of this stuff and i do feel pretty paranoid now. Thanks in advance.
If you reset the wifi router, you need to reset the admin password access to something not the default. . Also make your wifi passwords harder to crack.
How these typically work is you had you’re steam guard compromised and swapped to another device. When thus happens you won’t get an email, notification, etc informing you so it’s easy to not notice. You’ll also stay signed into the steam app generating unusable codes.
You need to reset your steam guard, and change your password. You’ll most likely want to change passwords on anything that has the same info.
I’m sorry to tell you but steam will not help you recover stolen skins. Their lack of proper security with steam guard and refusal to take action is what keeps this scam market alive.
So they probably didn’t even have “control” over my phone and the screenshot was just accidentally made by me ?
I had the “Back tap” feature enabled on my iPhone, and that feature notoriously makes your phone take random screenshots. It happened to me before, if this is the case it was awfully timed. I changed most of my passwords now anyways.
Yep most likely. I like using a password manager like bitwarden to randomly generate my passwords and have them all different. This way if one account is compromised you don’t have to worry about the rest. Best of luck.