Almost all items on my friend's account were stolen about a week ago.
The strange thing is, that he has Steam Mobile Authenticator enabled but the "attack" somehow bypassed it. This happened once earlier, but we simply ignored it thinking that he has left his account logged-in somewhere, and changed his password immediately.
The trade history is empty and he didn't even get the "Trade Confirmation" notification on his phone.
I think he had tried to contact steam support earlier but no help.
Link to his profile: http://steamcommunity.com/id/himanshu-Devilhunter
Link to post on steam forum: http://steamcommunity.com/discussions/forum/1/135509124600561789/
I have a few questions in this scenario:
- How do we make sure that the account is protected and safe?
- Is there any way that we can trace or know who is the attacker?
- Is there any way that we can know where are those items, considering we have asset-id of all of them?