Steam account possibly hijacked

[Allen]

Just a heads up to anyone on my friends list on Steam, if I send you any messages they may not be from me. Currently trying to contact Steam to see if it has been stolen (I wouldn't have thought it was, I'm quite secure), but after receiving a strange email from Steam this morning I'm trying to change my password, but unable to.

And yes, the email was from Steam.

Have removed my card details for now, no extra purchases have been made, so that's a good sign at least.

[Grey M@a]

Just a heads up to anyone on my friends list on Steam, if I send you any messages they may not be from me. Currently trying to contact Steam to see if it has been stolen (I wouldn't have thought it was, I'm quite secure), but after receiving a strange email from Steam this morning I'm trying to change my password, but unable to.

And yes, the email was from Steam.

Have removed my card details for now, no extra purchases have been made, so that's a good sign at least.

Will keep an eye out as I am sure you are on my friends list. Was the email the one with the 4 digit code asking for access to their store?

Thought the steam secure stuff was an opt out feature, were you using the new steam secure feature.

[oolon]

My account was opted in to steam secure so it could be that. I got an email when trying to login to the web page from my work.

[Allen]

I haven't touched Steam for about a weak, not logged in at home to Steam or to the website either. This morning I received an email saying that my contact email address had been updated and to raise a support ticket if I didn't request this change. I was able to log in, remove my card details, check no sales had been made, see that my contact email address had actually not been changed... however, when logging in to Steam on my home PC remotely, I am unable to change my password.

And no, I didn't click any links in the email to "login" and check these details, I signed on through a separate browser (in fact, a separate machine, read the email on my phone, logged into the website on my work PC).

[oolon]

Hmm sounds like some was fishing for your steam info.

[Allen]

Possibly, but having checked the email out, it does look legit... even the link seems to point to the correct site.

[ArtAddiction]

Did you enable Steam Guard?

[Allen]

Yeah. It looks like everything it OK though, managed to change my password, nothing found on my computer that could've recorded the new password... must have been a mistake, or someone attempting, but failing, to hack it?