{"id":79099,"date":"2015-07-27T12:30:47","date_gmt":"2015-07-27T10:30:47","guid":{"rendered":"http:\/\/mygaming.co.za\/news\/?p=79099"},"modified":"2015-07-27T12:37:45","modified_gmt":"2015-07-27T10:37:45","slug":"steam-was-hacked-valve-to-blame","status":"publish","type":"post","link":"https:\/\/mygaming.co.za\/news\/pc\/79099-steam-was-hacked-valve-to-blame","title":{"rendered":"Steam was hacked: Valve to blame"},"content":{"rendered":"<p>Did you know that Steam was hacked? From the 25th of July, there were reports from people on NeoGAF, Reddit, and Twitch TV\u00a0that Steam accounts had been hacked.<\/p>\n<p>Streamers such as Summit1G, Phant0ml0rd, Goldglove and JoshOG\u00a0<a href=\"https:\/\/www.reddit.com\/r\/Steam\/comments\/3elt4w\/several_twitch_streamers_just_got_hijacked_and\/\" target=\"_blank\">reported a loss of access <\/a>to their Steam accounts.<\/p>\n<p>In\u00a0a previous instance, one Reddit user named ryugarulz had reported lost items from his Steam account on the 21st of July, when a user logged into the account.<\/p>\n<p>Typically, an email requesting verification for a new login is sent through to a user. Such an email was never sent through to ryugarulz.<\/p>\n<p>Further hints to issues with Steam occurred during the 26th of July, when\u00a0the Steam Community was down. Of course,\u00a0there were many claims\u00a0that the situation was under control.<\/p>\n<p>However, one <a href=\"http:\/\/www.neogaf.com\/forum\/showthread.php?t=1084810\" target=\"_blank\">NeoGAF user Lucifon <\/a>reported otherwise, on the 26th of July as well, that Steam was experiencing a huge attack. But this all remains heresy.<\/p>\n<p>Lucifon alleges that he received multiple password resets and Steam Guard, which is Steam&#8217;s security service,\u00a0requests. All of these requests came from a device within the Russian Federation, when Lucifon in actuality resides in the United Kingdom.<\/p>\n<p>Lucifon then made certain to check his email security had not been compromised, to find that there had been no login attempts from the Russian Federation. This means that both Steam and Steam Guard were compromised without email access.<\/p>\n<p>But how were such hacks possible, this video below shows exactly how easily\u00a0people were able to exploit Steam&#8217;s security measures, and gain access to users&#8217; Steam accounts.<\/p>\n<p><iframe loading=\"lazy\" src=\"https:\/\/www.youtube.com\/embed\/QPl_BJoBaVA\" width=\"600\" height=\"338\" frameborder=\"0\" allowfullscreen=\"allowfullscreen\"><\/iframe><\/p>\n<p>Prospective &#8216;hackers&#8217; simply went to the Steam support page, filled in the username they wished to gain access to. They then clicked the email recovery code option.<\/p>\n<p>Following this, they were taken to the recovery code page and simply\u00a0could click continue without filling in\u00a0a recovery code, and finally were able to reset the unsuspecting Steam user&#8217;s password. How simple is that? Far too; no wonder accounts were being hacked.<\/p>\n<p>There have been many\u00a0claims that this major security issue <a href=\"https:\/\/www.reddit.com\/r\/Steam\/comments\/3elt4w\/several_twitch_streamers_just_got_hijacked_and\/\" target=\"_blank\">has been resolved<\/a>. Yet as of the writing of this article, we cannot gain access to the Steam store page ourselves and consistently receive an error message.<\/p>\n<p>We&#8217;re hoping that Valve has crashed Steam themselves as a measure in halting the madness. We have heard that Valve has put a band on all trading and community market sales as a means to defend hacked accounts.<\/p>\n<p>That should mean that whatever you own is safe for now.<\/p>\n<p>Sadly, Valve has not come out with an official statement to address what&#8217;s happening. Optimistically though, perhaps Valve is still working on this password issue and actively trying to prevent further hacks, by fixing other security issues which we have no knowledge of.<\/p>\n<p>The reality of internet-based distribution services like Steam, Xbox Live and PSN are that they are susceptible to hacks and cyber attacks.<\/p>\n<p>Eventually, Steam would be comprised, but the ease at which hackers had access to Steam users&#8217; accounts is slightly unsettling.<\/p>\n<p>Hopefully, Valve will make sure Steam is further secured and no more security loopholes like the one above can be exploited.<\/p>\n<hr \/>\n<h4>\u00a0<strong>Source: <a href=\"http:\/\/dualpixels.com\/2015\/07\/26\/steam-hacked-accounts-compromised-community-offline\/\" target=\"_blank\">Dual Pixels<\/a>, <a href=\"http:\/\/www.neogaf.com\/forum\/showthread.php?t=1084810\" target=\"_blank\">NeoGAF<\/a>, <a href=\"https:\/\/www.reddit.com\/r\/Steam\/comments\/3elt4w\/several_twitch_streamers_just_got_hijacked_and\/\" target=\"_blank\">Reddit<\/a><\/strong><\/h4>\n<h3 class=\"my-4\"><strong>More On Valve &amp; Steam<\/strong><\/h3>\n<p><a href=\"http:\/\/mygaming.co.za\/news\/columns\/73087-valves-virtual-reality-headset-with-htc-is-epic.html\">Valve\u2019s virtual reality headset with HTC is epic<\/a><\/p>\n<p><a href=\"http:\/\/mygaming.co.za\/news\/pc\/76594-hatreds-funniest-steam-user-reviews.html\">Hatred\u2019s funniest Steam User Reviews<\/a><\/p>\n<p><a href=\"http:\/\/mygaming.co.za\/news\/pc\/76792-steams-controller-unveiled-finally-a-controller-for-pc-gamers.html\">Steam\u2019s controller unveiled: finally a controller for PC gamers<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>It was bound to happen, but not this easily.<\/p>\n","protected":false},"author":224,"featured_media":79107,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sma_x_autopost_enabled":true,"_sma_x_custom_text":"","_sma_x_autopost_status":"idle","_sma_x_autopost_error":"","_sma_x_post_id":"","_sma_x_attempts":0,"footnotes":""},"categories":[3],"tags":[9463,1969,15397,85,14963,14961,697],"class_list":["post-79099","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-pc","tag-hacked","tag-news-2","tag-pc","tag-steam","tag-steam-guard","tag-steam-support-page","tag-valve"],"_links":{"self":[{"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/posts\/79099","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/users\/224"}],"replies":[{"embeddable":true,"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/comments?post=79099"}],"version-history":[{"count":2,"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/posts\/79099\/revisions"}],"predecessor-version":[{"id":79111,"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/posts\/79099\/revisions\/79111"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/media\/79107"}],"wp:attachment":[{"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/media?parent=79099"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/categories?post=79099"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/tags?post=79099"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}