I got my Steam account phished - here’s what I did to get it back
Phishing can happen to anyone, even those who know what to look for.

I like to think that I have pretty decent cybersecurity practices. I use MFA or 2FA on everything I can, passkeys on every service that supports them, have authenticators set up for Blizzard, Microsoft, Steam, and other accounts, but I still got hacked on Steam. Or more precisely, I got phished on Steam, sent to a fake Counter-Strike 2 event page, and tricked into putting in what I thought were Steam OpenID login details. Except, of course, they weren't.