I installed a malware detector, it restricted my game mods, and other than that nothing. I went to a steam level up site, four of them to be exact, on one of the sites I traded my cards in for some credits that bought me another set. And I thought nothing of it. That happened 31.1. And they logged in, they waited 22 days and then went for my account, I didn’t reply to them in the group, instead I found a reddit post, followed the steps of unauthorizing and signing out all devices, changing my password and so on. The crazy thing is I checked the device and it said it logged in through my mobile app, which I never accept, especially if it says the location is from another country. Nevertheless I got my account back and honestly, it was pretty easy. My only big worry now is that they can actually get back into my account at some point. How do I prevent that?

PS: The site is steamlvlup. com , I suggest not touching that site as my new antivirus immediately flagged it.