Forums

Looking for answers- Hacked

Quick find code: 408-409-511-66116098

Zirtix
Nov Member 2018

Zirtix

Posts: 6Bronze Posts by user Forum Profile RuneMetrics Profile
I posted this on a separate forum thread, and was told to make my own to receive help-

I recently received an in-game message informing me that my account had been locked due to third party activity and after recovering my account, I found all valuable items gone and my money pouch emptied. I took every mode of security for my account, email verification, Authenticator and bank pin... yet somehow someone hacked my account or something else has happened, but my confusion and lack of understanding comes from the lack of details that were given to me from that very uninformative in-game message. I have put hundreds of hours and much money into this account and have lost loads of progress for a reason I donít understand. I donít know how to prevent it from happening again since I already had everything in-place to prevent something such as this. I would like more information because I canít happily play this game and re-build when this could happen again. How can I receive more information so as to prevent this from happening in the future? Thank you

14-Aug-2019 18:28:36

Skod†River
Nov Member 2009

Skod†River

Posts: 7,390Rune Posts by user Forum Profile RuneMetrics Profile
Hey Zirtix.

Is the registered email secure with 2fa ?

Was Auth still active or disabled ?

Your bank pin is still up running ?

What client did you use to play the game with ?

If you played on your phone , did you connect to open WIFI's ?
Clan : Order Of Adventurers

FriendsChat : Ooa team

14-Aug-2019 18:37:36

Zirtix
Nov Member 2018

Zirtix

Posts: 6Bronze Posts by user Forum Profile RuneMetrics Profile
Hi Skod!

Yup, it was secure, I had the Authenticator up and running (never taken it off), and bank pin was still there, so I am very confused :(

I used the usual client I have always used, the one downloaded from Runescape.com

14-Aug-2019 18:40:48

Wynd
Nov Gold Premier Club Member 2018

Wynd

Posts: 60,365Emerald Posts by user Forum Profile RuneMetrics Profile
Even if you have your account fully secured with all those layers, someone can hijack your computer by a trojan virus. If you visit suspicious websites, then your computer is prone to getting infected with malicious software that can ultimately affect your RuneScape account. As soon as a trojan is installed, the hijacker can act as if they were you accessing your account and email address.

To prevent that from happening, first, you shouldn't visit websites you don't recognize. Visiting such websites will definitely put your computer in danger. Second, you should immediately scan your computer for potential viruses. Once you finish with the scan and are sure that nothing was found, then I'd suggest you update your RuneScape account details. Once you do that, you can also add Two-Factor Authentication to your RuneScape registered email address. This is to avoid someone from accessing your email address and thus changing your RuneScape account information.

This section of the Support page has all the security tips that can help you: Security.

14-Aug-2019 18:41:49 - Last edited on 14-Aug-2019 18:42:31 by Wynd

ZeeZee
Jun Member 2019

ZeeZee

Posts: 378Silver Posts by user Forum Profile RuneMetrics Profile
If the hacker was able to bypass your authenticator, it means one of two things, either they had access to your phone or they had access to your e-mail. The most likely scenario is that they had access to your e-mail as well as your Runescape account, which allows them to disable your authenticator.

This means your e-mail has likely been compromised and I would recommend resecuring it, as well as enabling authentication on your e-mail if your e-mail provider offers that. A Runescape account is only as secure as the computer you play it on and the e-mail address linked to it. Also, I don't know if you did but since you were hacked it's likely that your e-mail password and Runescape password were the same, that puts your account at more risk. Your e-mail password should always be different than your Runescape password.

I would assume that your computer was compromised in some way, either by a virus/malware/etc, and through that the hacker was able to obtain your login details through a keylogger or something or the sort. I would highly recommend securing your computer as fast as possible (do an in-depth virus scan) and after you ensure your computer is safe again, change all your account security again, as it could still be accessible by the hacker.

I would highly recommend reading these articles:
Securing Your Computer
Securing Your Mobile Device
Account Security Tips
~ZeeZee~

14-Aug-2019 18:42:33 - Last edited on 14-Aug-2019 18:50:09 by ZeeZee

Skod†River
Nov Member 2009

Skod†River

Posts: 7,390Rune Posts by user Forum Profile RuneMetrics Profile
Well since Auth still are active and the same with your Bank pin , then can we rule your email out as the sinner. ;)

If they had access to that would Auth been disabled.

Have you watched any RS related Video's on YouTube ?
Watched any RS streams ? (Twitch)
Saw a ad on Fb (about bxp and such for OSRS) ?
Got any emails saying something about a password change/ email change (which had a Cancel tab in it) ?
Clan : Order Of Adventurers

FriendsChat : Ooa team

14-Aug-2019 18:54:31 - Last edited on 14-Aug-2019 18:55:26 by Skod†River

Zirtix
Nov Member 2018

Zirtix

Posts: 6Bronze Posts by user Forum Profile RuneMetrics Profile
Hi Wynd and Zee Zee,

Thanks for all that info! I would assume it was my computer that got compromised from what you both have said- I recently started watching some twitch streamers, so I find it hard to believe it wasnít a coincidence that this happened right when I started, which is sad. I changed the associated email with twitch in hopes that was the cause, and changed all passwords, but will probably have to do that again after I see if it really was my computer. Thank you all for the help!

14-Aug-2019 18:55:16

Wynd
Nov Gold Premier Club Member 2018

Wynd

Posts: 60,365Emerald Posts by user Forum Profile RuneMetrics Profile
Zirtix said:
Hi Wynd and Zee Zee,

Thanks for all that info! I would assume it was my computer that got compromised from what you both have said- I recently started watching some twitch streamers, so I find it hard to believe it wasnít a coincidence that this happened right when I started, which is sad. I changed the associated email with twitch in hopes that was the cause, and changed all passwords, but will probably have to do that again after I see if it really was my computer. Thank you all for the help!
That's definitely it! Make sure that you
NEVER
follow any links/URLs/websites that they start to promote. Ultimately, their goal is to have your computer compromised so that they can access your RuneScape account and steal it.

If you follow the suggestions provided to you, your computer should be safe and your RuneScape account as well! Make sure to take a look at this for all the details and guides you need in order to have a secured computer and account: Security.

14-Aug-2019 18:57:49

Quick find code: 408-409-511-66116098Back to Top