What the phishing scam looks like, with apologies to Scoop:
You get a message from a friend asking you to vote for something (or an offer for free whatevers.) Your friend gives you a link to what looks like an official Steam page. You log in, and within seconds your authenticator is removed, your email address is changed, and the scammer now controls your account. They sell off/trade your high value items, then begin to contact all of your friends with the same message until they get another bite. Here is an example of the chat:
First, report them. It takes less than a minute. After a few people report them, the account is locked by Steam. That reduces the damage done to the rest of the victim's friends. Here is the process, starting from the person's profile page:
Third, post in this thread to warn other OOers.
Bonus community service: Send them a PM on OO, or contact them elsewhere to let them know ASAP that their account is compromised. They'll want to act fast. Then link them to this thread.
If you are the victim:
1. Open a ticket with Steam support immediately. You do not need to be logged in to do this. It is also best if you do it from the original email address the account was created with (if still available.) Get the ticket in to get in the queue, then go back and edit it to update it with more information later.
2. Update the ticket with the information they're going to want. Some bits that will help if they're in there:
[*]The name, billing address, and last four digits of a credit card used on the account
[*]Screenshots of receipts/pages showing keys redeemed on the account (for instance, a Fanatical or Green Man Gaming page showing redeemed keys.)
Apiece of account security advice: Buy a Steam Wallet card. Even a cheap one. Scratch it off, redeem it on your account, then put the used card and the receipt from the store in a safe place. This one thing could be enough to regain control of your account should you ever lose it, as it gives you a piece of hard evidence, that Steam accepts as proof, that the account is yours.
Previous threads on the topic:
/edit - I missed a fourth thread.
https://www.octopusoverlords.com/forum/ ... hp?t=98660
https://www.octopusoverlords.com/forum/ ... hp?t=98686
https://www.octopusoverlords.com/forum/ ... hp?t=97864
https://www.octopusoverlords.com/forum/ ... ?p=2864921