u/HengHeng8

Hi Steam Community,

I've dug and searched through the forum but can't seem to find an answer I could possibly relate to, but yesterday while I was playing a game, I suddenly received email notifications that 2 games were purchased totalling up to $150 and gifted to two different users. And another $150 that's showing PENDING on my credit card which I could not find/trace on my Steam Wallet/Inventory History etc.

I quickly removed my saved payment card from Steam and did my due diligence in logging out all devices, changed my email and password, re-generate new Recovery codes etc... And yes I've had my 2FA & Steam Guard turned on for many years.

Some similar posts that I have read so far suggested there could've been a malware infostealer on the PC that was able to obtain the steam sessions credentials hence it was able to bypass the 2FA authentication?

I did what was suggested, I ran the following:

1. Windows Defender deep scan including offline scan (found nothing/threat).
2. Ran RKILL to terminate any active malware processes and then ran Malwarebytes advanced (found nothing/threat).
3. Ran Nextron THOR Lite IOC & YARA scanner and found no traces of any malicious files or compromises.

Checked on Steam the IP Address during the time games were purchased was at Kuala Lumpur, Malaysia. I am currently based in Australia.

Thoughts?

Hi Steam Community,

I've dug and searched through the forum but can't seem to find an answer I could possibly relate to, but yesterday while I was playing a game, I suddenly received email notifications that 2 games were purchased totalling up to $150 and gifted to two different users. And another $150 that's showing PENDING on my credit card which I could not find/trace on my Steam Wallet/Inventory History etc.

I quickly removed my saved payment card from Steam and did my due diligence in logging out all devices, changed my email and password, re-generate new Recovery codes etc... And yes I've had my 2FA & Steam Guard turned on for many years.

Some similar posts that I have read so far suggested there could've been a malware infostealer on the PC that was able to obtain the steam sessions credentials hence it was able to bypass the 2FA authentication?

I did what was suggested, I ran the following:

1. Windows Defender deep scan including offline scan (found nothing/threat).
2. Ran RKILL to terminate any active malware processes and then ran Malwarebytes advanced (found nothing/threat).
3. Ran Nextron THOR Lite IOC & YARA scanner and found no traces of any malicious files or compromises.

Checked on Steam the IP Address during the time games were purchased was at Kuala Lumpur, Malaysia. I am currently based in Australia.

Thoughts?