Origin and Steam keep getting hacked. Please help

[alanwest09872]

Ok I just purchased parts for 2 new computers

I formatted all hard drives and did fresh install of windows 8 for both

All I installed was windows updates, cpuz, coretemp, gpuz and drivers from the manufactuers websites.

I logged onto origin have it sitting there and bam it said someone else loged on. I then changed my Email password then Origin password.

an hour later same thing happened with steam (it told me that someone from the ukraine logged into my account , they got that info from the IP adress)

so I changed the password for my steam account and email again. (10-12 digit password each time)

an hour later it states again someone has logged into my origin account.

So thats 3 hacks in under 5 hours. So what the hell is going on.

They havent changed anything or edited any of my info it just says someone else has logged in.

so what is going on

 

[DaveSimmons]

The first 2 hacks could have been from infections on your old computer(s).

When you changed Origin, did you do it on the new computer or an old one?

> cpuz, coretemp, gpuz

Did you download these fresh, or copy them from an old PC that might be infected? What about other things you installed like Origin and Steam? Fresh or copied?

Also, if you downloaded these from the wrong site and they showed "Unknown Publisher" instead of "published by: company name" on the first popup screen, you might have downloaded infected copies.


Aside from infections, do you use the same user names and passwords for other forums? Forums gets hacked all the time.

Did you share your account info with anyone else?

 

[alanwest09872]

Everything is 100 percent fresh

i downloaded them from the sites that I have always downloaded them from. I didnt change anything.

I never had this problem till today (except once 3 months ago with orgin but got that fixed real quick)

 

[CrackRabbit]

Do you have any type of security software installed?
If not try downloading MS Security Essentials and scanning your computer for the keylogger/virus that you are infected with.

 

[mjd]

When they hacked your accounts the first time, could they have updated your origin + steam contact information or security questions? You don't need the main password to get in to accounts if you have the email or security question info.

 

[alanwest09872]

both steam and origin got into the email. I changed the password both times then they got into the origin a third time.

the secirity question I picked for origin was my soft animal name. I dont think they would no that.

 

[JAG87]

Keylogger IMO...

 

[HeXen]

Anonymouse has their eye on you, stay away from me. But seriously if everything is 100% fresh as you say, there's no real way for someone in the Ukraine to get such info within 5 hrs without a key logger of sorts or one badass brute force cracker or access to Origin and Steam servers, perhaps email account but then why target you. You have a decent security AV don't you?

Are you using Wifi? It's possible for a neighbor to view data and then use Ukraine servers to hide. Also could be error with steam trying to login twice, I've seen such messages before but assuming your not just trolling, it's very odd less you have a weak spot somewhere in your security.

 

[Grooveriding]

Use your phone or another location to go into your email; change your email password, any recovery email associated with it and any password recovery questions etc. Go into your Steam and Origin and do the same.

Better yet, make a brand new email, secure it and change your Steam and ORigin to that new email and do this all from your phone or another computer.

Reformat and reinstall Windows. Make sure your apps are clean and if you're a pirate you know where your pirated stuff has been....

 

[imaheadcase]

Sounds like a security problem with account itself.

I think they might have had access to it before, just they sold it/gave it away to someone. Security questions are very easy to guess.
I really did get into someones else account on accident when I did a fresh install months ago, I mistaken a letter in email address and used recovery to get it. I used pets name to guess it and got into his account. He only had 10 games, but i told steam about it and fixed it back. lol

 

[alanwest09872]

I use wifi but its password protected.
Grooveriding those are great ideas. I changed everything and no one has logged in a while. If it happens again I will definitly do that.

and Hexen. I am not trolling lol I never try to troll. Every question I have has a purpose.

and I thought trolling was just being a jerk online.

 

[CuriousMike]

do this all from your phone or another computer.

I would recommend a computer outside of your house; if your phone uses your WiFi inside or the other computer is in your house, it could be a pointless exercise.

Turn off wifi on your phone and do it.

 

[monkeydelmagico]

Better yet, make a brand new email, secure it and change your Steam and ORigin to that new email and do this all from your phone or another computer.

....

Yep, sounds like email is compromised. Any accounts that use this email to contact you should also be considered compromised.

 

[SunnyD]

Yep, sounds like email is compromised. Any accounts that use this email to contact you should also be considered compromised.

This.

 

[gothamhunter]

Yep, sounds like email is compromised. Any accounts that use this email to contact you should also be considered compromised.

:thumbsup:

 

[vshah]

also enable 2 factor authentication if your email provider supports it.

 

[quakeworld]

If your passwords are as anonymous as your username/profile (real name, dob and location) info here then you're giving hackers an easy time to get you.

 

[Fanatical Meat]

I never could figure this out, why hack a steam account? The CC info is blocked and if you order something to gift yourself it gets canceled. Why do people do this?

 

[silverpig]

Yep, sounds like email is compromised. Any accounts that use this email to contact you should also be considered compromised.

THIS.

If they get your password that quickly, it's because they have access to your email.

Change your email password first. Change your security questions. Then change your origin and steam passwords and see if it happens again.

And don't just put a "1" at the end of your password. The longer and more random your password, the better. If you're using gmail, make sure 2-factor authentication is on.

 

[silverpig]

I never could figure this out, why hack a steam account? The CC info is blocked and if you order something to gift yourself it gets canceled. Why do people do this?

To play free games?

 

[HardcoreRobot]

are you trying to login to the same account on both computers at once?

 

[alanwest09872]

If your passwords are as anonymous as your username/profile (real name, dob and location) info here then you're giving hackers an easy time to get you.

Ya I would never do that.

I do have to admit I have used a password like Doggy1 before but now each of them have 5-6 numbers after them

 

[HeXen]

I use stuff like H24U76lk8Nb for passwords, then I memorize them. However hackers can just bypass by hacking the server. I had my Gmail accounts compromised several times like that before and is why I stopped using them.

 

[Kougar]

These were new, never before used high strength passwords right?

I never could figure this out, why hack a steam account? The CC info is blocked and if you order something to gift yourself it gets canceled. Why do people do this?

Because Steam accounts can have $200 stored as credit on the account. They can buy digital items with that money, trade it through a network of alt accounts to themselves and sell it.

Or, they go to a legitimate trade site / channel / server and sell the bought item. Or, they list a crate with an alt account for $200 on the steam market, buy it with the hacked account, and network the steam funds around... The easiest way is to just sell the bought item to someone else just below market prices, either for Paypal funds, cash, or some game. The buyer then gifts the game to a legit, unrelated email account that the hacker uses, and Valve won't be any the wiser. There's a half million ways to move steam funds and inventory (which can be worth four figures easily) around, many of which leave legitimate buyers holding stolen inventory items that Valve will usually later nuke. As a legitimate steam trader I know multiple ways, but I'm probably not even scratching the surface.

 

[alanwest09872]

Hey guys im just curious if Origin is running and I restart my pc. approx 15-20 sec and it auto logs back in could that cause it to say someone else is logged in?