sparoc3

sparoc3 t1_j1oul5b wrote

Naah I wasn't phised, I downloaded Adobe Reader crack and then nearly every account of mine was compromised. There's no way they went and reset every account, they must have simply extracted it from browser.

Now I'm using authy tho.

1

sparoc3 t1_j1ots5c wrote

>Having email confirmation is basically worthless if your email was compromised.

That doesn't mean it's not 2FA.

My gripe is how the fuck did they get my steam password at all.

>If you're not using Steam Guard through the app, you don't have 2FA.

Two factor authentication simply mean 'two' means of authentication, first is password and the second is the code received on email.

Steam guard is an additional thing that necessitates you should be in possession of a particular phone. It's more than 2FA and more secure can said to be 3FA.

Every site on this world sends you code on mail/phone number when 2FA is activated.

0

sparoc3 t1_j1okkx4 wrote

>If your email shared a password with any of those accounts on compromised sites they would have access to your emails too, and be able to get to the 2FA and delete the email before you even knew it arrived.

Nope, it was different. That's what got me so perplexed. Maybe they just stole all pw saved on browser still doesn't explain lack of 2fa mail.

And how does one get tricked in to giving 2fa lol. The same kind of people who share CC details with strangers.

One of my other email was hacked too, and the hacker is still trying to get in, it was a burner account so I don't care but steam keeps sending me 2fa mail which was conspicuously absent for my main account.

Steam guard is too much of a PITA cuz steam just keeps kicking the account off from phone and I had to re-login every time, I had it for a couple of months but then went back.

−1

sparoc3 t1_j1ofc90 wrote

My steam was hacked with a shit load of other websites where I have activated 2FA were hacked as well, the insane thing is I never even recieved the 2FA mails. But the hackers just changed PW and even email in some case. I'm sure it wasn't a key logger because the pw were just saved and I never put it in.

10