Steam safety

anomaly

Forum Fiend
Joined
May 12, 2010
Messages
641
Hey everyone.

I just want to tell you all to keep your password safe! My friend just got hacked/bruteforced on Steam. He had a very complex password with capital letters in the middle and random number, yet this guy still got through. So remember to keep your passwords long and unbreakable! Also, don't press links from those who don't sound like the real thing ;)

The hacker was/is from russia and will send you a link to "join my steam group". Funny thing is first of all, it is hosted on a non-official steam page in russia, and secondly if you ask him who he is, he'll spam you with those links in hope of you accidentally clicking it. Lucky for my friend he was online at the time. If anyone wants the link for whatever reason you can ask.

I wouldn't recommend using passwords shorter then 10 letters/symbols/numbers and don't use ordinary dictionary words.

:chair:
 
Ahhh thats's bad news, Thanks for letting us know! I'll know what to do now if he talks to me (shout loads of offensive abuse :D)
 
No reason to wait until it gets hacked and you lose your account though.

Don't want to be paranoid but if you have an easy pw you should change it.
 
Thanks for the heads-up and reminder Bloodshot! This is always good info and a good reminder that alot of money and time go into these accounts of ours and it would be a shame to lose them.

*Salute*
 
If you're going to get hacked, you're going to get hacked.

Yeah in a way you are correct in a way.

But the difference is getting hacked by some lucky little crap who finds you and you have taken no precautions in protecting your account. Or getting hacked by the serious there is nothing you can do to keep the skilled piece of crap outta your account no matter what precautions you take to protect your account.

Think of it like this. Leave your cars and houses unlocked. Every punk who wants what you have can get it. Lock all and put a security alarm on your house. (Not your car cause those dont work lol). Then only those serious burglars will get what you have.

There are a lot more punks than professionals out there. It's all about reducing the chances of you getting hacked.
 
Yeah in a way you are correct in a way.

But the difference is getting hacked by some lucky little crap who finds you and you have taken no precautions in protecting your account. Or getting hacked by the serious there is nothing you can do to keep the skilled piece of crap outta your account no matter what precautions you take to protect your account.

Think of it like this. Leave your cars and houses unlocked. Every punk who wants what you have can get it. Lock all and put a security alarm on your house. (Not your car cause those dont work lol). Then only those serious burglars will get what you have.

There are a lot more punks than professionals out there. It's all about reducing the chances of you getting hacked.

Sure with a dictionary attack having a halfway decent password will prevent you from getting hacked but if someone's going to bruteforce you, they're going to bruteforce you and it really just comes down to luck whether you'll get hacked or not.
 
Times like that i wish i knew about hacking.. just so i could trace back and fins the #^$%#&%@&# who is on the other end and completely cook every single piece of connected equipment they have so they can't use it again! And then load them huge phone bills so they get cut off and have debt collectors after them.. and drop in a police note that they are drug dealers known for hiding substances internally.. load them membership in every STD clinic around and then "accidentally" forward some invoices to all the people on their email contacts.. and generally act up cranky with them!!
 
There is a thread somewhere about steam accounts being hacked and other similar stuff.
 
I highly doubt that bruteforce works on steam. Either a phisher or malware.

There are limited times to enter the password for steam.
 
The only thing i have seen and i did post on this a month ago is clicking on an invite or link that requires your steam login info.

The usual message comes from a friends acct that's been high jacked and offer's a link to a forum that has dirt on you.

The other one i have seen will offer you free steam games ,and of course it takes you to a screen that looks very much like a official steam login page.

When you login to view the forum or collect your "free" games , your toast and they continue the cycle by messaging all your friends with the same malicious intent.

Loin to steam "verify" your e-mail and use common sense when someone asks for your personal info.

The official Steam forums have lot's of info regarding this subject.
 
Sure with a dictionary attack having a halfway decent password will prevent you from getting hacked but if someone's going to bruteforce you, they're going to bruteforce you and it really just comes down to luck whether you'll get hacked or not.

I would estimate that maybe .0001% of all accounts hacked on steam are the result of brute forcing, and it was probably done by a friend who had some variant of the password already. As Bole said, you can't just enter in a password 1000 times per minute, brute-forcing is the absolute weakest threat against your accounts. Key-loggers and spear-phishing claim almost 100% of hacked accounts in the form of fake Steam pages (look for the SSL certificate, if the site isn't https:// with the Steam cert then it's fake) and the like.

Rev made the best point about internet security in general. No system is immune to every single threat and there's not an institution in the world that hasn't been infiltrated by some piece of malware at some point in their existence. The best we can do is minimize our attack surface and present fewer opportunities to the attackers.

Here's the link to the 101 course on what happens if your account is compromised: http://www.edgegamers.org/forums/showthread.php?t=66273

And here's a sticky with compiled tips to maintain strong internet security: http://www.edgegamers.org/forums/showthread.php?t=69383
 
I remember when Ron first joined eGO and he had that long thing about Kalt that I never read. Good to see Ron posting big things that I dont plan to read again. :)
 
Back
Top