A significant security issue exists in Steam. This topic is discussed by LTT and Veritasium.
A significant security issue exists in Steam. This topic is discussed by LTT and Veritasium.
Absolutely, that’s the tricky side... But you mentioned money was taken—should be possible to recover it, only if they purchased Steam games. That’s a persistent issue in the market place; it feels like you can’t really escape it. Still, technically speaking, they should assist. How do you actually get them to help? That’s the challenge they’ll usually dismiss with an apology. (Unless you escalate it with a lawyer or a big social media push...) It’s frustrating how often this happens. Yes, but realistically, what comes next?
Was Steam Guard already active on your account prior to this incident?
I visited the police and will continue until the legal process allows. Based on how the attack happened, it’s my responsibility. I’ve already messaged Gabe, perhaps I’ll explore other options. Steam support made it obvious they wouldn’t tolerate any less than serious action and simply closed the case. That was truly unacceptable and shocking.
Updated: My teammate's telegram was compromised using the same technique as me. This isn't directly tied to Steam, but it highlights another example of the vulnerability. Both of us had our SIM cards manipulated as potential attack points, just like described above. "Colleagues, my telegram has been hacked—avoid clicking links and don’t support anyone." The police are still looking into this case. They tend to avoid weekend investigations, so we should expect better results starting tomorrow.
Absolutely, op keeps emphasizing this point. The detailed explanation from the Veritasium video shows just how costly those attempts would be for attackers. In reality, it’s rarely feasible, and there’s no concrete evidence it ever occurred this way. Social engineering remains the most common method—much cheaper and even easier.
every victim shares the same carrier, and all services independent of phone numbers remained untouched. for instance, the perpetrators didn’t compromise my email accounts. only telegram and steam were targeted, even though gaining access to my emails would have made me more valuable to steal. that’s just my experience. law enforcement is moving too slowly, so I haven’t received any updates on this matter.