A movie-style robbery has taken place on the digital video game platform Steam, where a thief accessed the account of a notable Counter-Strike skin collector, stealing assets valued at approximately two million dollars.
The criminal, who posed as the owner during an account recovery process, managed to bypass Steam’s robust security measures, including two-step verification.
Counter-Strike skins are cosmetics that can vary in price from a few cents to hundreds of thousands of euros, functioning as financial assets within an unregulated market.
Counter Strike skins, a target for theft due to their high value
The thief took advantage of personal data leaks from the victim, known in the community as HFB, which allowed him to communicate with Steam’s technical support and manipulate the account recovery.
Despite the fact that the platform has security mechanisms designed to prevent such incidents, human vulnerabilities were the key to the success of the theft. Once the thief accessed the account, they began selling the stolen cosmetics at ridiculous prices on various sales websites, before Valve realized what had happened.
In an unexpected turn, Valve took unusual measures by reversing transactions related to the theft, returning them to the rightful owner and ensuring that buyers did not suffer financial penalties.
It is estimated that the thief obtained at least 242,000 dollars in Bitcoin before the company intervened, although their whereabouts remain unknown.
This incident highlights not only the vulnerability of user accounts on digital platforms but also the responsibility that companies like Valve must assume in the face of security failures that jeopardize their customers’ assets. In an increasingly digital world, protecting personal information becomes more crucial than ever.