Steam Accounts - eBay & Hijacking Alerts - January 2007

[Better|Off|Dead]

Current eBay Alerts

Warning: Do Not Purchase Steam Accounts On Ebay

There are a number of people selling Steam Accounts on eBay.

DO NOT PURCHASE THEM:

• It is against the EULA to sell Steam Accounts
• They are either hijacked Steam Accounts or opened with stolen credit cards.
• The accounts will be closed and we have been informed that PayPal / eBay will NOT help since no merchandise physically changed hands.

Current Hijacking Alerts

Malicious Programs In Downloads - Added August 2006

Account holder will be contacted or see promoted a "mod" in the form of an executable file (.EXE) that is in fact malicious software designed to steal Steam account login information...

[More Details Below]

VALVe Employees Impersonated on Instant Message Programs
(Steam Friends, AOL IM, MSN Messenger, etc.)

People will contact account holder with display name of somename@valvesoftware.com and request Steam Account name / password to investigate an alleged cheating infraction...

[More Details Below]

VALVe Support Impersonated via Email

People will contacted by email requesting a Steam Account name / password to investigate a support issue - usually an alleged cheating infraction...

[More Details Below]

Bogus Offer to Join a HL2: Episode Two Beta

People are being contacted and offered the opportunity to participate in a Beta for Half-Life 2: Episode 2. This is a Steam Account hijacking scam...

[More Details Below]

Bogus Offer to Lower SteamID

Web sites exist that offer a lower SteamID in exchange for Steam Account name and user password. This is a Steam Account hijacking scam...

[More Details Below]

Fake Clans / Fake Clan Sites Attempting to Obtain Personal Information

VALVe have verified reports of people setting up fake clans / fake clan websites with the express purpose of stealing Steam Accounts...

[More Details Below]

Illegal Steam Clients & Multiplayer Game Cheats

Since illegal Steam clients are no longer working, and with the effectiveness of VAC, keyloggers and trojans designed to steal Steam Account information have been added to these applications...

[More Details Below]

Multiplayer Game "bot" Packs That Ask for a Steam Account Name & Password

VALVe have verified reports of bogus "bot" packs that ask for your Steam Account name and User password when you run the installer. This is a Steam Account hijacking scam...

[More Details Below]

[Better|Off|Dead]

Malicious Programs In Downloads - Added August 2006

Method

Account holder will be contacted or see promoted a "mod" in the form of an executable file (.EXE) that is in fact malicious software designed to steal Steam account login information.

Functionality that some of these "mods" are supposed to implement are:

• Screen Shot Functionality
• "Bunny Hopping" Ability

Upon execution account holder may be displayed an image similar to this.

Other variations also reported.

Response

As with any other software you install on your system you should be certain of it's origin, authenticity, and intent. If you are have questions about a particular application you can contact VALVe Support and ask for assistance or post here at the forums.

Action

If you have installed an application where you are unsure of its origins or intentions you should immediately uninstall the application and try to change your password to something else.

If this fails you will need to read the following FAQs:

Reclaiming a Hijacked Steam Account
Contacting VALVe Billing and Support
Account Security Recommendations

[Better|Off|Dead]

VALVe Employees Impersonated on Instant Message Programs
(Steam Friends, AOL IM, MSN Messenger, etc.)

Method

People will contact account holder with display name that appears support related and request Steam Account name / password to investigate an alleged cheating infraction.

Other variations also reported.

Response

VALVe will NEVER contact you in this way or request this information via "Friends" or any other IM / IRC method.

If you are contacted via "Friends" please refer to this FAQ:

Friends Security

DO NOT USE THE SAME PASSWORD FOR YOUR LOGIN TO ANY STEAM RELATED SITE AS YOU USE FOR YOUR STEAM ACCOUNT PASSWORD.

Action

If you have provided your Steam Account information to someone via "Friends" you should immediately try to change your password to something else.

If this fails you will need to read the following FAQs:

Friends Security
Reclaiming a Hijacked Steam Account
Contacting VALVe Billing and Support
Account Security Recommendations

[Better|Off|Dead]

VALVe Support Impersonated via Email

Method

People will contacted by email requesting a Steam Account name / password to investigate a support issue - usually an alleged cheating infraction.

Example 1)

From: Valve Support <support.steampowerd.com@gmail.com> Mailed-By: gmail.com
To: kalapadea@gmail.com
Date: Jul 4, 2006 8:31 PM
Subject: Valve Support

Recently, VAC flagged your Steam Account for a possible cheating infraction. However, the evidence provided proves inconclusive and needs further investigation. For Valve to verify your account, you will need to provide your Steam Account Username, Steam Account Password, and anytime your Steam Account may have been used by another person (Internet Cafe, LAN, Friends/Family) to eliminate this possible account suspension.

To update this question by email, please reply to this message. Because your reply will be automatically processed, you MUST enter your reply in the space below. Text entered into any other part of this message will be discarded.

[===> Please enter your reply below this line <===]

[===> Please enter your reply above this line <===]


Question Reference #021191-0372897
Category Level 1: VAC
Date Created: 7/2/2006 08:33 PM
Last Updated: 7/4/2006 3:29 PM
Status: Unresolved

Discussion Thread
JeffH
I have checked the logs and the infraction occured on July 2, 2006, however, the information that VAC logged does not have sufficient evidence, and must undergo further investigation. I cannot release much evidence, but I can tell you that it is possible that you yourself may not have cheated, but it is possible someone else who may have used your account has.

To investigate this problem, I ask you to provide the information asked above (account username, account password, and possibility of another using your account) into the spot indicated as a reply to this email. If you do not provide your information, you will be banned from VAC servers.

If you have any other questions, you can ask them in the area above this message along with your account information.

Thank you.


JeffH

Valve support
www.valvesoftware.com

Example 2)

Dear Steam User,

We have been having recurring problems with multiple user(s)
signing on to the same account, ergo; several people using the same account
from
different IP Addresses at the same time. In order to prevent this, we are
authorizing a validation process, in which you, the contact e-mail
registered to Steam, e-mail us a code in which you authorize every time
you login to ensure that no one shares your account. To validate your
account within the next 5 days (otherwise it will be disabled), respond to
this
e-mail support-steampowered_@hotmail.com in the following format;

Username:
Password:
Code:

IMPORTANT: You must enter the above information into the Steam
application.

Signed,

{The Steam Support Team}
To contact us about this problem email support@steam-powered.com,
otherwise
respond to the e-mail above


==============
This notification has been sent to the e-mail address you provided when
you
created your Steam account. For information on Valve's privacy policy,
please
visit www.valvesoftware.com/privacy.htm

Example 3)

Dear Steam User,

In order to continue using your current Steam account, you must
validate your authenticity by
filling out the required information in this form.
Please reply to this Email, using the current format below:

First Name: ( Your First Name )
Last Name: ( Your Last Name )
Username: ( Your Steam Account Username )
E-Mail: ( The Email Address You Registered The Account To )
Password: ( The Password You Use To Log Onto Your Steam Account )


Our database will be re-formatted soon, due to some damage caused by
destructive users. We will need to record our active users and add them
to our database once again.

You must validate your account within 30 days or, your account will be
deleted. Thank you for your co-operation, Best regards, Steam Account
Management Team.

Example 4)

Dear Steam User.

As you can see, our mainframe servers are down or having problems.
In order for us to ensure that your account will be working without any problems we ask you to supply us with your account information.
The reply must include your username and password for the account.
Otherwise, we are afraid that we can not guarantee that your account will work.

Thank You.
SteamPowered Support.

Response

VALVe will NEVER ask you for your Steam Account name or User password via email.

DO NOT USE THE SAME PASSWORD FOR YOUR LOGIN TO ANY STEAM RELATED SITE AS YOU USE FOR YOUR STEAM ACCOUNT PASSWORD.

Action

If you have provided your Steam Account information to anyone via email you should immediately try to change your password to something else.

If this fails you will need to read the following FAQs:

Reclaiming a Hijacked Steam Account
Contacting VALVe Billing and Support
Account Security Recommendations

[Better|Off|Dead]

Bogus Offer to Join a HL2: Episode Two Beta

Method

People are being contacted (usually via email) and offered the opportunity to participate in a Beta for Half-Life 2: Episode 2.

The offer generally comes with this image or one similar:

Image of bogus offer

The offer may request the user repond to emails such as:

steampoweredgiveaway@yahoo.com
beta@steampowered.com

Response

This is not a legitimate offer.

You can expect any Steam-related promotions to be offered through:

http://www.steampowered.com/

VALVe will NEVER contact you from or ask you to respond to a free email provider.

Action

If you have responded and provided your Steam Account information you should immediately try to change your password to something else.

If this fails you will need to read the following FAQs:

Reclaiming a Hijacked Steam Account
Contacting VALVe Billing and Support
Account Security Recommendations

[Better|Off|Dead]

Bogus Offer to Lower SteamID

Method

Web sites exist that offer a lower SteamID in exchange for Steam Account name and user password.

Response

This is not a legitimate offer.

You cannot change your SteamID.

You can expect any Steam-related promotions to be offered through:

http://www.steampowered.com/

Action

If you have responded and provided your Steam Account information you should immediately try to change your password to something else.

If this fails you will need to read the following FAQs:

Reclaiming a Hijacked Steam Account
Contacting VALVe Billing and Support
Account Security Recommendations

[Better|Off|Dead]

Fake Clans / Fake Clan Sites Attempting to Obtain Steam Account Information

Method

VALVe has verified reports that people are setting up fake clans and/or fake clan websites with the express purpose of stealing Steam Accounts.

1) A "member" of a fake clan will offer membership, server Admin, or web site privileges in exchange for a Steam Account name and User password.

2) Registration information from a fake clan site is used in a brute force attack on a Steam Account.

Response

Under no circumstances should a legitimate site be asking for the password to your Steam Account.

DO NOT USE THE SAME PASSWORD FOR YOUR LOGIN TO ANY STEAM RELATED SITE AS YOU USE FOR YOUR STEAM ACCOUNT PASSWORD.

Action

If you come across a site that is asking for your Steam Account User password, please report it to a forum moderator immediately.

If you have provided your Steam Account name and User password to any clan or web site you should immediately try to change your password to something else.

If this fails you will need to read the following FAQs:

Reclaiming a Hijacked Steam Account
Contacting VALVe Billing and Support
Account Security Recommendations

[Better|Off|Dead]

Illegal Steam Clients & Multiplayer Game Cheats

Since illegal Steam clients are no longer working, and with the effectiveness of VAC, keyloggers and trojans designed to steal Steam Account information have been added to these applications.

Method

1) Applications that claim to provide free VALVe games usually contain keyloggers and trojans that steal your personal information.

2) Working multiplayer game cheats that may claim to be "VAC Proof" usually contain keyloggers and trojans that steal your personal information.

Response

Besides the obvious issue of someone stealing your personal information, use of these applications is in breach of the Steam Subscriber Agreement - you are also at risk of having your Steam Account disabled or VAC banned:

Steam Account Disabled
Valve Anti-Cheat System (VAC)

Action

Uninstall any of these applications and read the following FAQs:

Spyware, Adware, and Viruses Interfering with Steam
Reclaiming a Hijacked Steam Account
Contacting VALVe Billing and Support
Account Security Recommendations

[Better|Off|Dead]

Multiplayer Game "bot" Packs That Ask for a Steam Account Name & Password

VALVe have verified reports of bogus "bot" packs that ask for your Steam Account name and User password when you run the installer.

Method

As described above the user is challenged for a Steam Account name and User password by the application installer.

Response

This is a Steam Account hijacking scam.

Never enter your Steam account password into anything but the Steam Client login window.

Action

If you have provided your Steam Account name and User password to any applications described above try to change your password to something else.

If this fails you will need to read the following FAQs:

Reclaiming a Hijacked Steam Account
Contacting VALVe Billing and Support
Account Security Recommendations

[Matt]

Do not delete.