It's been debunked, valve confirmed they don't even use the company that is said to be hacked (a SMS 2FA company) and the source of it all is an AI company's LinkedIn post that itself looks AI made itself
I mean, $5000 for 89 MILLION steam accounts? Come on.
Just have Steam Guard and you're good.
I mean, $5000 for 89 MILLION steam accounts? Come on.
Just have Steam Guard and you're good.
Comments
AI Company on Linked In
v
Twitter Blue user with 900 followers
v
Resetera thread called 8.9 MILLION STEAM ACCOUNTS HACKED EVERYONE CHANGE YOUR PASSWORDS NOW!
v
Gaming websites
v
Bluesky
And no one stopped to read the second post by the Twitter user saying "I was wrong"
Just get past the initial people screaming and go to the ones going "wait this is already debunked guys" who explain that it's benign
https://www.resetera.com/threads/possible-sms-2fa-supply-chain-breach-impacting-steam-unconfirmed-check-within-for-details.1188741/
It's not a journalism site, it's a fucking web forum
It's like trying to use Reddit as a news source
I kept waiting for better sources and none materialized.
I wish that was true in the modern age of the internet
https://xcancel.com/MellowOnline1/status/1921672313608823002
But yes, I'm sorry to have distributed such a thing if it was really fake.
Though I did change the password and add in Steam Guard Mobile Authenticator onto my phone just in case any of the breach happened.
Yeah was a big eyebrow raise. Wait so these people broke into a SMS 2FA company and all they did was take the DB and leave?
I'd think that selling the steam account of asmongold alone for example to a cryptocurrency guy is worth more than 5k.
I've had my WoW account hacked once many years ago, and Blizzard recovered it before I even noticed. Just get 2FA whenever you can, you can do it from your phone, it's that easy.
https://steamdb.info/calculator/
Only my Blizzard/WoW account has been hacked twice without compromising the password.
*these are all accounts that don’t matter, like my Steam account
Always regularly change password of your high value accounts.
...
!!!FUCK AI!!!
...
I spent the better part of an hour changing my passwords. Had to disconnect my authenticator, come up with a new secure password, reconnect the authenticator...
*Sigh* it was probably long past time to change my Steam password anyway. Relied on auto-login for so long...
Then they removed it in favor of Steam Guard backed with SMS verification.
this is functionally no different from "they're eating the cats".
Either I'm "the bad person who doesn't want to keep people safe" or I'm "the idiot who was wrong".
Nice.
Boy who cried wolf, except digitally.
Bleeping Computer sources the actual post from the hacker selling the data and has sifted through some of the data already
https://www.bleepingcomputer.com/news/security/twilio-denies-breach-following-leak-of-alleged-steam-2fa-codes/
A 2FA code should be invalidated upon use, Steam Guard codes aren't.
The debunked IN PART, about twilio, please don't misinfo on top of misinfo
I think either the guy selling SMS list for 5k is lying, or the infosec company signaling about this
IDK who the hell dumps an SMS gateway and leaves to just sell data for 5k, you can do so much...
The linkedin post has a screenshot
That shows it was posted in "spam lists" subforum. Though the category might actually include account details to send spam /from/, unsure, the description is cut off.
I wish the "Underdark ai" posted some actual damn info :X