looks like I downloaded something that I thought it was legit, and suddenly a steam chat pops (an user I never knew) and I invited him to play cs
he said ok injct (went off) and when I logged back into my steam, my friends were all gone, my profile was changed and I had a lot of comments with a site on it...
changed credentials, also logged off every connected device and I run antivirus...
it also looks like he tried to purchase stuff with my account (I think I didn't have any info saved from pp or credit cards on it) so I dont understand why it says that I have attempted a lot of purchases...
is there anything I can do to be safe?

You've done all the correct things so far, you just made a nearly costly mistake with the downloading of something.

I'm very sorry to hear this happened to you. I would ensure 2fa is enabled going forward for the added layer of protection. Not sure what you downloaded or whether or not it was a factor but, to be safe I'd only download things from creditable sources going forward. Hopefully you were able to get it resolved and not too much damage was done. Good Luck to you!

This post was edited by Capacitor on Jun 16 2026 10:35am

What have you run for anti-virus / anti-malware? I would recommend changing credentials for everything, as well - not just what was compromised.

e/

https://forums.d2jsp.org/topic.php?t=57400303&f=34

This post was edited by Epiphany on Jun 16 2026 10:37am

Also check you steam API keys and look for anything that you didn't create and revoke it.

I used malwarebytes, I have premium one

I have steamguard on my steam, not sure how they managed to get in. I changed pw and logged off all the devices.

Disc and all the important stuff have autheticator codes and they all ask for something when you will log in...



what is API keys? sorry ^^

Steam allows developers to create API keys that can interact with certain Steam account functions. Legitimate uses include:

Trade bots
Inventory tracking sites
Trading tools
etc.
The problem is that scammers trick users into logging into a fake Steam page. The victim unknowingly authorizes an API key on their account.

Go to:

Steam API Key Management

If you have never created an API key:
Ideally, the page should offer to register one.
If you see an existing domain name or key that you don't recognize, that's suspicious. So I would revoke it. Without knowing for sure how your account was compromised, I would check this just as a precaution. Everything you've done up to this point is spot on though.

This post was edited by Capacitor on Jun 16 2026 11:03am

well after changing it, someone made a purchase of 10 euros with my paypal account....

malwarebytes can be helpful (pretty strong and has freemium for 14 days then can delete i believe) , best way to make sure nothing is left over that scanner might fly over is to do clean wipe and reinstall of os and then changing all your passwords one more time.

Install and configure 2FA wherever possible, especially for things like paypal/skrill etc

This post was edited by Twitchthroe on Jun 16 2026 11:33am

I did
they managed to purchase 10 euros on steam with my paypal, which has a double autenthicator... I changed password again...