February 12, 2025. Around 5AM my time.

I was about to wake up, review for my quiz, prepare my things for my class…

And I opened my Messenger, my Bluesky, my Twitter, all with one simple, yet shocking sentence.

You got hacked.

And then, they posted a screenshot that looked something like this (this is under my gaming Discord account, but yeah):

Now, before I dive on the cause of the whole hell thing, might as well explained this specific hell thing.

---

When you click the link, it will redirect you into some sort of a replica of the Steam page, and you will “login” and then it will ask for your Steam Guard (the authenticator specifically for Steam) code. and expectedly, you would received, well $20.

Except the last sentence is a HOAX.

What is actually happening behind the scenes, is someone, internally in the background, obtained that info, use it to reset a lot, email, password. And worse, if there is something valuable in your Steam account, they will just sell and you lose it, and even worse, they’ll dump it on the grey market.

And if it wasn’t enough, they will use it to scam your friends, and the cycle repeats to those who got it.

---

Now, with that being said:

Didn’t you learn anything about account security? Multi-factor authenticators/2-step authenticators, and passkeys, strong passwords, all of that?

I do those.

I usually reset my passwords so often. I usually keep security in check. I always used many multi-factor authentications such as Authy, and making sure not to click scammy links, like the one above.

Then how the f**k did you get hacked?

I have a password manager I formerly use nowadays called LastPass. LastPass, is one of the good password managers I have used throughout the years. While I no longer use it because I moved a while back to Proton Pass, it was a good password manager.

Except however, it would turn out that during the time I used it, little did I know, this would foreshadow my blindsideness.

Turns out, and I didn’t get to read it, LastPass was hacked few months ago, and someone who hacked may have gotten my account details, including a bunch of other accounts.

And at the point, because I didn’t take action fast enough, few months later, someone got access and here we are today.

I recommend you read this Reddit post, as it covered much.

And due to this circumstances, after the whole incident since, I have asked LastPass to wipe the account out of existence.

---

So, now, almost a week later, it’s around 90% restored.

I would say this for the record. While I tried to make sure all security measures of my account were in place. I am 100% taking the responsibility for not being updated at the time, and not taking into account fast enough.

And for that, I genuinely apologize to everyone who gotten the link, and to those who click it, as much as possible, please change everything in instant.

And if they managed to do what they have done on my account, please report to Steam Support and all of that.

And even if it’s not Steam, please, and with all warning, use 2FA/MFA, change into a strong password, keep security checks every so often, and in case you have lots of accounts, use a password manager, I recommend currently Proton Pass, or 1Password (haven’t used it, but putting it because a couple of my friends used it).

With that, I wanna thank to a couple of people who I don’t know, who sent me an email, as well a couple of my friends for alerting me on the whole thing. And thanks to everyone reading this.

I hope this will not be repeated again. But then again, this is the Internet, where anything goes.