I had some skins in CS:GO which were recently traded to a random profile “by me”. When i wrote a ticket to Steam support it was closed again “by me”.
That’s when i knew they were still in my Steam profile so i wanted to change my steam password/email asap.
That’s when things got even more interesting. When i was checking on the security code in my mail app (code to change my credentials) i noticed my phone took a screenshot by itself, and when i entered that code it was already incorrect. So I realized that they were also using my phone at this point. Nothing else was taken, no money from my banking apps (revolut etc) just a few CS:GO skins. I instantly factory reseted my phone without any app or data recovery, just signed back into iCloud. Since then I managed to change all of my passwords (including steam), and i reopened a ticket which stayed open as of now.
My flatmate even said we should reset the router, which we did. Are there any other steps i should take ? I’m not really experienced in any of this stuff and i do feel pretty paranoid now. Thanks in advance.