polar Posted April 28, 2013 Share Posted April 28, 2013 Will I actually even get my account back? Is so, how and when? Answering your questions from the other thread here: You can't login to steam again by just reopening steam? Did the hijacker change your password or something? Also are you sure that the two profiles you linked are the only people you don't recognize that are new? They don't exactly jump out as a typical hijacker's profile. The problem with trying to track the hijacker / scammer is that if it's not done right away they will be long gone (as in they will dump the item to an alt and then sell somewhere else in a matter of hours). Within 1 day, my unusuals that were hijacked had changed hands 4 times. If I didn't follow them from the get go, there would have been no way I could keep track of them. Link to comment Share on other sites More sharing options...
AwesomeMcCoolName Posted April 28, 2013 Share Posted April 28, 2013 Will I actually even get my account back? Is so, how and when? Contact steam support. And explain that you were hijacked and youll get the stuff back. Link to comment Share on other sites More sharing options...
MC22 Posted April 28, 2013 Share Posted April 28, 2013 I actually have a phisher post on one of my trades. Link to comment Share on other sites More sharing options...
lukecandy Posted April 29, 2013 Share Posted April 29, 2013 http://steamcommunity.com/id/yy45 http://steamcommunity.com/id/dexteretoy Either one of these is probably the hijacker. They suddenly appeared on my friends list. It was not the black guy. Link to comment Share on other sites More sharing options...
Hugh Jazz Posted April 29, 2013 Author Share Posted April 29, 2013 I'm not really sure which profiles are the hacker. http://steamcommunity.com/id/HugeAss/friends A lot of people became my friends after the hijack. The hijacker had also changed my password and linked email. Link to comment Share on other sites More sharing options...
MC22 Posted April 29, 2013 Share Posted April 29, 2013 http://www.tf2outpost.com/trade/10209116#/35934289 mm. people trying my stuff Link to comment Share on other sites More sharing options...
Liddojunior Posted April 29, 2013 Share Posted April 29, 2013 Steam support will restore your account and restore your items only once. Link to comment Share on other sites More sharing options...
Hugh Jazz Posted April 29, 2013 Author Share Posted April 29, 2013 Steam support will restore your account and restore your items only once.Good enough for me. I would be more careful. Also, need help on tracking the hijacker. I don't know where to look. Item history doesn't seem to help. It seems to be in a private backpack, but I'm not too sure. Link to comment Share on other sites More sharing options...
Synister Posted April 29, 2013 Share Posted April 29, 2013 Item history doesn't seem to help. It seems to be in a private backpack, but I'm not too sure. http://steamcommunity.com/id/pl0/ Seems to have gotten several items from you, or he got them from the private account, but it's doubted. Upon checking a bit, he has your: Gold paint S. Backburner S. Shiv S. Medi Gun (2) 50 Refined (minimum) Orange paint (6 minimum) S. Sapper S. Syringe Gun S. Jag S. Dead Ringer S. Sniper Rifle S. Market Gardener S. Rocket Launcher S. Pistol S. Sticky Launcher S. Axtinguisher S. Ubersaw He also seems somewhat suspicious due to the fact that a large chunk of items in his backpack have no history {like all of his ToD tickets} (as in the person that he got them from originally didn't use tf2outpost.) Well...that and his backpack jumped by about $150-200 from Apr. 27 to Apr. 29. Then there's http://steamcommunity.com/profiles/76561198072868903 who now has your Bliz Fuka, (2) S. Miniguns, & (1) S. Shotgun (They were all still in "new", so I didn't check the rest of his items.) Be sure to let me know if it helped, or if you actually did these somewhat large trades yourself. The pl0 guy is my suspect in this. =============================================================== Edit: http://steamcommunity.com/profiles/76561198039711397 -- Friend since April 28, 2013. Profile is 100% private. Holy shit I think I found it! I believe it is the user above that is private. Here's his outpost account: http://www.tf2outpost.com/user/334550 Sold a Bill's Hat painted Zepheniah's Greed that he got from a user banned for phishing. Sold keys for 5 ref each that he got from Hugh Jazz I very much hope these leads help you, and I wish you the best of luck in your pursuit! I'll be checking this regularly to keep myself updated on how it goes! =============================================================== Link to comment Share on other sites More sharing options...
Hugh Jazz Posted April 29, 2013 Author Share Posted April 29, 2013 http://steamcommunity.com/id/pl0/ Seems to have gotten several items from you, or he got them from the private account, but it's doubted. Upon checking a bit, he has your: Gold paint S. Backburner S. Shiv S. Medi Gun (2) 50 Refined (minimum) Orange paint (6 minimum) S. Sapper S. Syringe Gun S. Jag S. Dead Ringer S. Sniper Rifle S. Market Gardener S. Rocket Launcher S. Pistol S. Sticky Launcher S. Axtinguisher S. Ubersaw He also seems somewhat suspicious due to the fact that a large chunk of items in his backpack have no history {like all of his ToD tickets} (as in the person that he got them from originally didn't use tf2outpost.) Well...that and his backpack jumped by about $150-200 from Apr. 27 to Apr. 29. Then there's http://steamcommunity.com/profiles/76561198072868903 who now has your Bliz Fuka, (2) S. Miniguns, & (1) S. Shotgun (They were all still in "new", so I didn't check the rest of his items.) Be sure to let me know if it helped, or if you actually did these somewhat large trades yourself. The pl0 guy is my suspect in this. Thank you very much. Really appreciate your help alot. The one that got my unusual had not known that my account was hijacked and unknowingly traded a bud's worth in keys for my unusual. He probably got good deals on the three strange weapons too. I had warned him on outpost, but it was too late. http://www.tf2outpost.com/trade/10299574 I'm assuming that the pl0 guy got a really good deal on all of my items. I'm still not sure how he obtained my refined though. It didn't look like he sold any of his keys. pl0 is the biggest suspect here, but if I lost about 800 ref worth and he only got 150 ref, where did the rest go? The first thing I noticed when I lost my account was that my festive weapons were almost immediately traded away. They weren't tracked to any backpack so I assume that they went straight to the hijacker's private backpack. Link to comment Share on other sites More sharing options...
Hugh Jazz Posted April 29, 2013 Author Share Posted April 29, 2013 =============================== Edit: http://steamcommunity.com/profiles/76561198039711397 -- Friend since April 28, 2013. Profile is 100% private. Holy shit I think I found it! I believe it is the user above that is private. Here's his outpost account: http://www.tf2outpost.com/user/334550 Sold a Bill's Hat painted Zepheniah's Greed that he got from a user banned for phishing. Sold keys for 5 ref each that he got from Hugh Jazz I very much hope these leads help you, and I wish you the best of luck in your pursuit! I'll be checking this regularly to keep myself updated on how it goes! =============================================================== Wow, that's really amazing. You don't know how grateful I am. Checking his steamrep history, http://steamrep.com/profiles/76561198039711397?t=1367074032 It looks to me we are getting close. I'll do some more research. Only backpack history he has is on 27/4: http://backpack.tf/id/76561198039711397?time=1367046000 Link to comment Share on other sites More sharing options...
Synister Posted April 29, 2013 Share Posted April 29, 2013 Wow, that's really amazing. You don't know how grateful I am. Checking his steamrep history, http://steamrep.com/profiles/76561198039711397?t=1367074032 It looks to me we are getting close. I'll do some more research. Only backpack history he has is on 27/4: http://backpack.tf/id/76561198039711397?time=1367046000 Thanks to that snapshot of his friends list, here's an obvious alt. http://steamrep.com/profiles/76561198082963372 Ofcourse, he's Russian Link to comment Share on other sites More sharing options...
Hugh Jazz Posted April 29, 2013 Author Share Posted April 29, 2013 One of his friends has also been marked on steamrep for hijacking and phishing. http://steamrep.com/profiles/76561198065588049 I also got a list of suspects which have private backpacks and may have my items. Suspects http://steamrep.com/profiles/76561198039711397?t=1367074032 - nel http://steamrep.com/profiles/76561198082963372 - nel alt http://steamrep.com/profiles/76561198038262900 - overpro http://steamrep.com/profiles/76561198061336339 - eagle http://steamrep.com/profiles/76561198004502327 - alladar http://steamrep.com/profiles/76561197978010126 - (phisher) http://steamrep.com/profiles/76561197995030282 - snowcrow Link to comment Share on other sites More sharing options...
Synister Posted April 29, 2013 Share Posted April 29, 2013 One of his friends has also been marked on steamrep for hijacking and phishing. http://steamrep.com/profiles/76561198065588049 In the hijacking report, it is said that he claims to have been hijacked as well. If it's true, then I have a strong feeling that nel is the center of all of it. Not only that, but he was just marked today, so that leads me to further believe it's nel. Nel and Calin have been friends since February 27, 2013.* My guess is after hijacking the account, he used it to spread the link around even more before eventually Calin's account was marked off as a scammer. (Calin was perma banned for phishing the same day that he became friends with nel.) * http://steamcommunity.com/profiles/76561198065588049/friends/ http://www.tf2outpost.com/trade/10383768 In that trade, click the last key. Tf2outpost was able to log that key going into nel's backpack. Plus, the bill's hat that nel sold on outpost (the one painted Zepheniah's Greed) was from Calin's backpack. Looking at Calin's backpack, it seems like a possible dump account? Not sure. http://www.tf2outpost.com/backpack/261520 http://www.tf2outpost.com/backpack/247879 This player was phished & their items were dumped into Calin's backpack, but it looks like they regained control of their account & steam support gave their items back. ======================(Not as much related to your case, more to the phishing as a whole)========================= Calin's report: http://forums.steamrep.com/threads/76561198065588049.28646/ The phishing link was posted by a user named Nobody*. All of Nobody's bill's hats went to a user named aЯBee0v0**. At least 3 bill's hats & 2 unusuals owned by aЯBee0v0 went to a user named #black*** while a Scorching Le Party went to Tosha:3****, who has also gotten many items from other phished users. #black and Tosha:3 are public dummy profiles used to liquidate the items, and then the pure is put on private backpacks. Tosha most likely dumped it to http://steamcommunity.com/profiles/76561198029210191 (Friends since Feb. 28th, full private profile) black most likely dumped it to http://steamcommunity.com/profiles/76561198033456477 or http://steamcommunity.com/profiles/76561198076691430 * http://www.tf2outpost.com/user/250205 **http://www.tf2outpost.com/user/223195 ***http://www.tf2outpost.com/user/333133 ****http://www.tf2outpost.com/user/333996 Link to comment Share on other sites More sharing options...
Hugh Jazz Posted April 30, 2013 Author Share Posted April 30, 2013 The phishing link was posted by a user named Nobody*. All of Nobody's bill's hats went to a user named aЯBee0v0**. At least 3 bill's hats & 2 unusuals owned by aЯBee0v0 went to a user named #black*** while a Scorching Le Party went to Tosha:3****, who has also gotten many items from other phished users. #black and Tosha:3 are public dummy profiles used to liquidate the items, and then the pure is put on private backpacks. Tosha most likely dumped it to http://steamcommunity.com/profiles/76561198029210191 (Friends since Feb. 28th, full private profile) black most likely dumped it to http://steamcommunity.com/profiles/76561198033456477 or http://steamcommunity.com/profiles/76561198076691430 Looking at steamreps,http://steamrep.com/profiles/76561198020070422 - nobody http://steamrep.com/profiles/76561198059563866 - #black http://steamrep.com/profiles/76561198019359943 - tosha:3 However, if you look at arbee0v0, he has quite a number of obvious alts. http://steamrep.com/profiles/76561198043894903 - arbee0v0 main http://steamrep.com/profiles/76561198081536655 - alt 3 http://steamrep.com/profiles/76561198081581605 - alt 4 http://steamrep.com/profiles/76561198081565648 - alt 5 http://steamrep.com/profiles/76561198083324758 - alt 6 http://steamrep.com/profiles/76561198083288037 - alt 7 Link to comment Share on other sites More sharing options...
PEASANT Posted April 30, 2013 Share Posted April 30, 2013 So this if your first experience getting hijacked? (CBF reading the posts) Link to comment Share on other sites More sharing options...
Synister Posted April 30, 2013 Share Posted April 30, 2013 Looking at steamreps, http://steamrep.com/profiles/76561198020070422 - nobody http://steamrep.com/profiles/76561198059563866 - #black http://steamrep.com/profiles/76561198019359943 - tosha:3 They don't really have to be marked or anything to be people who are doing it. All I know is that they are somehow getting a ton of items from phished users, but unlike the accounts that are stolen, they are not being used to spam out the phishing link more, which shows that they personally control those accounts & do not want them to get marked. Link to comment Share on other sites More sharing options...
Hugh Jazz Posted April 30, 2013 Author Share Posted April 30, 2013 Does 'nel :j' have a main account for tf2? Link to comment Share on other sites More sharing options...
Hugh Jazz Posted April 30, 2013 Author Share Posted April 30, 2013 So this if your first experience getting hijacked? (CBF reading the posts) Yes. Link to comment Share on other sites More sharing options...
Hugh Jazz Posted April 30, 2013 Author Share Posted April 30, 2013 I know that the hijacker had sold my items for pure, so the dying question I can't seem to find out the answer of is: where did the pure go? Link to comment Share on other sites More sharing options...
Synister Posted April 30, 2013 Share Posted April 30, 2013 Does 'nel :j' have a main account for tf2? Besides the private profile & his DOTA 2 counterpart, I don't think he has any others (besides the other accounts he probably uses to liquidate the items). I know that the hijacker had sold my items for pure, so the dying question I can't seem to find out the answer of is: where did the pure go? It was probably moved from private backpack to private backpack several times at this point. Link to comment Share on other sites More sharing options...
Hugh Jazz Posted April 30, 2013 Author Share Posted April 30, 2013 Besides the private profile & his DOTA 2 counterpart, I don't think he has any others (besides the other accounts he probably uses to liquidate the items).He possibly converted them to real money maybe. Oh, and I heard somewhere that you I have to prove that my account is actually mine. Something like proof of purchase of any game on my account. How would I do that? Link to comment Share on other sites More sharing options...
Synister Posted April 30, 2013 Share Posted April 30, 2013 He possibly converted them to real money maybe. Oh, and I heard somewhere that you I have to prove that my account is actually mine. Something like proof of purchase of any game on my account. How would I do that? Go through your email and try to find a receipt. Ex: http://i.imgur.com/KYWs6l5.png Link to comment Share on other sites More sharing options...
Hugh Jazz Posted April 30, 2013 Author Share Posted April 30, 2013 Go through your email and try to find a receipt. Ex: http://i.imgur.com/KYWs6l5.png Crap this was my brother's account when it only had l4d2 and he gave it to me. I think it's been 4 years and he might not know the email. But can I check if I buy tf2 items. My friend helped me get premium on tf2 when he bought 2 keys. Is that logged anywhere? Link to comment Share on other sites More sharing options...
Woifi The Viking Posted April 30, 2013 Share Posted April 30, 2013 Crap this was my brother's account when it only had l4d2 and he gave it to me. I think it's been 4 years and he might not know the email. But can I check if I buy tf2 items. My friend helped me get premium on tf2 when he bought 2 keys. Is that logged anywhere? You also get a email when you transfer money to steam.~ Not sure if that helps though. Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.