Woke up this morning to find multiple password reset and then a Steam Guard request in my emails from Russia at around midnight (I'm in the UK, emails showed as unread). After regaining access to my account by doing a reset password it said my account was authorised from Russia at 00:13 and if it wasn't me to change my password (Which I'd just done) and reset all Steam Guard authorisations on my account.
Luckily nothing seems to have changed, my inventory, items and account wallet all 'look' the same to me.
So... this means someone got into my emails and Steam, both of which are passwords completely unique to those services. I then checked my email account activity and there were no login attempts from Russia, nor were any successful login attempts from anyone but me recently. My emails weren't hacked as far as I can see.
This means someone got access to my Steam account without getting into my emails. Therefore bypassing Steam Guard. What gives?
Update - Explanation from YianGaruga:
Luckily nothing seems to have changed, my inventory, items and account wallet all 'look' the same to me.
So... this means someone got into my emails and Steam, both of which are passwords completely unique to those services. I then checked my email account activity and there were no login attempts from Russia, nor were any successful login attempts from anyone but me recently. My emails weren't hacked as far as I can see.
This means someone got access to my Steam account without getting into my emails. Therefore bypassing Steam Guard. What gives?
Update - Explanation from YianGaruga:
There was a huge security issue with Steam a few hours ago but I think it's fixed now
https://www.reddit.com/r/Steam/comments/3elt4w/several_twitch_streamers_just_got_hijacked_and/
How it worked
https://www.youtube.com/watch?v=QPl_BJoBaVA