I had some skins in CS:GO which were recently traded to a random profile “by me”. When i wrote a ticket to Steam support it was closed again “by me”.
That’s when i knew they were still in my Steam profile so i wanted to change my steam password/email asap.
That’s when things got even more interesting. When i was checking on the security code in my mail app (code to change my credentials) i noticed my phone took a screenshot by itself, and when i entered that code it was already incorrect. So I realized that they were also using my phone at this point. Nothing else was taken, no money from my banking apps (revolut etc) just a few CS:GO skins. I instantly factory reseted my phone without any app or data recovery, just signed back into iCloud. Since then I managed to change all of my passwords (including steam), and i reopened a ticket which stayed open as of now.
My flatmate even said we should reset the router, which we did. Are there any other steps i should take ? I’m not really experienced in any of this stuff and i do feel pretty paranoid now. Thanks in advance.
So they probably didn’t even have “control” over my phone and the screenshot was just accidentally made by me ?
I had the “Back tap” feature enabled on my iPhone, and that feature notoriously makes your phone take random screenshots. It happened to me before, if this is the case it was awfully timed. I changed most of my passwords now anyways.
Yep most likely. I like using a password manager like bitwarden to randomly generate my passwords and have them all different. This way if one account is compromised you don’t have to worry about the rest. Best of luck.