My Steam account has been hacked

[Rambowjo]

This morning I booted my computer, and Steam requested my credentials (logging in), so I logged in once more. Steam then said that the password was wrong. Since it had been some time since I logged in last time, I tried some different passwords, but nothing worked. I then requested my password sent to me, since I couldn't remember it. Next I went to my Gmail, but there was no email from Steam, except a mail I received about 14 hours ago (at the time), saying that my password had been changed, however not telling me what it had been changed to. About 1 minute later (after that email) I had received a second email from Steam, saying that my Steam account's reference email had been changed aswell, rendering the account completely out of my control.

Luckily, retrieving the account shouldn't be that much of a hassle, and right now I'm going through the process. Steam told me all I had to do was send a picture of a retail CD-key that I have used on Steam, plus my Steam account's name written on it. They also said I could my creditcard information, ofcourse only the last 4 digits, full name and expiration date.
I'm assuming that I'll have it back in my control soon enough, but this still makes me wonder how it happened.
The password I used on Steam was "flyhigh", a pretty simple password I registered with when I was about 11 or 12 years old I think. Is it likely that it was bruteforced, or is it more likely that I have a keylogger? I'm right now in school, scanning my computer for all kinds of bad stuff.

My WoW account is still intact, luckily.

I've also found out that the guy has been playing Counter-Strike on my account

 

[PsyXandeR]

My WoW account is still intact, unfortunately.

FIXXED. Get a life.

 

[Dark Pulse]

The password I used on Steam was "flyhigh", a pretty simple password I registered with when I was about 11 or 12 years old I think.

No lie. You know this.

Your best bet to do would be to make a longer password, and one with more than just letters. I use an alphanumeric password for most of mine, which takes considerable time to bruteforce, and by throwing in a few numbers that generally will render it more immune to simple wordlist searches.

 

[Rambowjo]

I've already devised a new password, which I think will take a very long time to bruteforce.

 

[WGH]

It's offtopic, but I always use random-generated passwords, which stored in encrypted file, backed up at multiple places. Its password isn't random, but pretty long. KeePass FTW

 

[Big-Al]

:s

 

[toniglandyl]

the worst case scenario would be if the guy obviously hacked in mutliplayer games like TF2 or L4D thus making you banned from these mutliplayer only games.

 

[thewalkingman]

Took me 5 days for steam to reactivate my hacked account. Stop downloading *wmv infected porn from Usenet Rambowjo.

 

[Sir_Brizz]

It's probably not likely that your password was bruteforced. Mainly, they'd need to get your account name from somewhere.

 

[Rambowjo]

That is true. Some people I know do have my password, but I doubt they'd steal my account :s

 

[SlayerDragon]

But maybe they gave that information away or somehow left that information open to the public.

Let that be a lesson. Never give your account information out.

 

[Grobut]

I've also found out that the guy has been playing Counter-Strike on my account

No i didn't..

 

[Kantham]

Hey R.

Try contacting Steam about it. As I mentioned before I already got the same issue. They got it fixed for me after I gave away a few of my starting credit card numbers, they said my account was indeed appearing to be scammed.

They can get to you via secret password and ****s like that.
Never say things like Secret answer "Where I was born" and then give that answer a real one. People will try to find info about you, and get your account that way.


OR, you got a key logger.

 

[Rambowjo]

Yea I kinda did that already, K.

 

[Kantham]

I suppose helping out and suggesting a solution to your said problem was a waste of my time then. I should probably have posted "lol" or ":S".

 

[SlayerDragon]

Or maybe read the OP.

 

[Kantham]

Or maybe read the OP.

TL DR foooo.

Anyway GL getting it back. I had around 6 games on my steam account.

My WoW account is still intact, luckily.

 

[Phopojijo]

No i didn't..

Neither did I...

 

[Jacks:Revenge]

Some people I know do have my password, but I doubt they'd steal my account :s

kids...

 

[Rambowjo]

Well, it's been recovered now by a Valve employee, so things are all good. That was a fairly fast response though, I was aiming after something like this standard


^^^ Jack, I would trust these people with my PIN-code. They know what digital privacy means, compared to some other idiots.