Automation is the engine of this attack. Hackers use software to input the combo list into the Steam login page at high speeds. If the software finds a match, the account is flagged. Within hours, a compromised account can be stripped of its inventory (CS:GO skins, trading cards), the email and password changed, and the account sold to a third party.