Accepted 76561198236277606 (๖ۣۜNonStop)

Victim

| steamname: BlueRain | CO
| steam3ID: [U:1:71342655]
| steamID32: STEAM_0:1:35671327
| steamID64: http://steamcommunity.com/profiles/76561198031608383
| customURL: http://steamcommunity.com/id/BringSomeDrinks
| steamrep: http://steamrep.com/profiles/76561198031608383


Scammer
| steamname: ๖ۣۜNonStop
| steam3ID: [U:1:276011878]
| steamID32: STEAM_0:0:138005939
| steamID64: http://steamcommunity.com/profiles/76561198236277606
| customURL: http://steamcommunity.com/id/NosStop_follow
| steamrep: http://steamrep.com/profiles/76561198236277606


Alt-Account**
| steamname: zotteett
| steam3ID: [U:1:41916248]
| steamID32: STEAM_0:0:20958124
| steamID64: http://steamcommunity.com/profiles/76561198002181976
| customURL:
| steamrep: http://steamrep.com/profiles/76561198002181976


Screenshots

1.- http://files.f-o-g.eu/g134a4
2.- http://files.f-o-g.eu/da292d

Hidden Content:

**Hidden Content: Content of this hidden block can only be seen by members of (usergroups: Legacy Trade Moderator).**

Description
My account was compromised due to hijacking, by this user.
A simple thing, he wanted me to join a TS3 lobby, which displayed a fake error message with two links that redirected you to the same webpage that downloads an executable file "msi_speak.exe", and without actually opening it I lost access.



1.-
Proof of the hijacking method in chat. The file that somehow I ended up with, losing access to my account.

2.-
I noticed about his alt few moments before I locked/lost access to my account, by looking at SCM transactions.

3.-
Proof of my current situation. My account is currently Locked but mostly all valuable items are now gone.



Unnecessary extra info

TF2 Outpost / Trade
This user leaving my TF2 items up for trade on Outpost, traded them away already.

https://www.virustotal.com/es/file/...ad3a7c21faf88a27b9fc39af/analysis/1443651219/
File Scan details on VirusTotal

46.201.58.215 (UA)
The IP address Steam gave me regarding the hijack email change on my account, if only someone could do anything with it.

rip.

 

3rd account, probably his main,
http://steamcommunity.com/profiles/76561198142110878

 

Hidden Content:

Hidden Content:

Hello, I'm sorry for posting here again, but if possible an admin could hide my email details in the 3rd picture ( http://files.f-o-g.eu/aegad2 ), or even remove it as its not essential in this thread.

 

Why do you think that? What's your evidence?

 

"๖ۣۜNonStop" used to mention through chat: "This is my alt for smurfing, for tournaments" "My main has almost 3k hours" (CSGO)
Never linked it/mentioned again, but you can clearly see that it is friends with "zotteett" (account that owns no games, and has only one friend), which also retrieved my remaining Steam wallet funds.

Such account banned on Steam, as well as "๖ۣۜNonStop"... apparently.
This may not be solid/concrete proof indeed, but, what a "coincidence".

 

Thank you for the report.

Hidden Content:

**Hidden Content: Content of this hidden block can only be seen by members of (usergroups: Legacy Trade Moderator).**

 

Can't find any proof that this account is an actual alt: http://steamrep.com/profiles/76561198002181976

Confirmed alts:
| steamname: Hinter
| steam3ID: [U:1:125187560]
| steamID32: STEAM_0:0:62593780
| steamID64: http://steamcommunity.com/profiles/76561198085453288
| customURL: http://steamcommunity.com/id/bringreaction
| steamrep: http://steamrep.com/profiles/76561198085453288

| steamname: 456
| steam3ID: [U:1:181402812]
| steamID32: STEAM_0:0:90701406
| steamID64: http://steamcommunity.com/profiles/76561198141668540
| customURL:
| steamrep: http://steamrep.com/profiles/76561198141668540

Hidden Content:

**Hidden Content: Content of this hidden block can only be seen by members of (usergroups: Legacy Trade Moderator).**