Tips from Derelict:
1. Set recovery email, 2. Change password, 3. Enable multifactor authentication, 4. Does not open any link even if it is sent by a friend, 5. Check the urls or email domains, in this case the URL is: steamcormunity, and the official one is steamcommunity, with double M.
My...