boyjohn22 Posted July 27, 2016 Posted July 27, 2016 Hey guys, I'm looking for some help. I don't know much about this sort of stuff... so looking for some people who might. My RS account today was logged into by someone other than me. Nobody else knows my password but me, and the account wasn't recovered or anything. They simply just somehow got a hold of my user name and password. Got my wealth, dropped my untradeables, and left. Was I key-logged? How'd they get my information? I just bought a McAfee 1 year subscription to virus scan my computer and what not... but I'm just baffled. I haven't put my information on any of those crappy fake Runescape links, or anything like that. I also just now set-up my 2-step authenticator for my account (Wish I had that before this happened lol) What do I do next? What the heck happened? Are there steps I need to do moving forward? Thanks!
Trump Posted July 27, 2016 Posted July 27, 2016 any friends you know irl? or anyone you gave info too?
boyjohn22 Posted July 27, 2016 Author Posted July 27, 2016 None man. Literally. It's not anyone I know, 100%. any friends you know irl? or anyone you gave info too?
Trump Posted July 27, 2016 Posted July 27, 2016 None man. Literally. It's not anyone I know, 100%. idk man it seems you did give a friend your password then, unless you downloaded or clicked some fishy link, there is no way you can get keylogged.
Tyelr Posted July 27, 2016 Posted July 27, 2016 (edited) I'm sure someone will recommend a free virus scanner. They have some free ones that are considered better than paid ones. It could be possible that you aren't keylogged. Is your RS username an email? If you're a member of any runescape forum (any forum or runescape private server) and you use/used your main email with the same password they could've gotten you that way. Thats why its reccomended to change your passwords often cause databases get leaked. Another possibility is you got brute forced. Don't know how its done these days with runescape but I'm sure its possible. Someone could've gotten your email from above method and brute forced it. Same thing happened to me a while back and botted my pure to 83 defence.... I recovered but lost like 15m and my pure. But at least it didn't get banned I guess. Guessing you didnt have a bank pin ? Edited July 27, 2016 by Tyelr
Darren Posted July 27, 2016 Posted July 27, 2016 You'd be surprised. There are many different computer viruses/malware/trojans that McAfee or most security programs can't detect... At first anyway. I highly doubt you got keylogged though. Maybe you use a common password?
Nick Posted July 27, 2016 Posted July 27, 2016 There's a lot of ways to check whether or not you have been keylogged. You don't happen to play random RSPS' do you?
Muffins Posted July 27, 2016 Posted July 27, 2016 (edited) Probably got hacked due to a db leak. edit: also McAfee is a dogshit antivirus, basically a virus in itself l0l Edited July 27, 2016 by Muffins
Twin Posted July 27, 2016 Posted July 27, 2016 Probably got hacked due to a db leak. This is the most likely cause. Just to be safe, download malwarebytes and do a scan. Also, change your passwords on another computer/wait until the scan is done and set up two step verification on your phone.
Muffins Posted July 27, 2016 Posted July 27, 2016 This is the most likely cause. Just to be safe, download malwarebytes and do a scan. Also, change your passwords on another computer/wait until the scan is done and set up two step verification on your phone. I'd also recommend him to get an antivirus that isn't a literal bucket of shit. 1
Rebel Posted July 27, 2016 Posted July 27, 2016 Malwarebytes. Do a clean up. im still here First and most obvious reason might be that you have a keylogger on your computer. Download Malwarebytes and scan your computer. After that go to LeakedSource.com and search your email from there, if it shows up as a hit you will need to remove your email address from the frontpage. The final way you probably got hacked was that your account was cracked, your credentials were simply found from some other site's database and used to bruteforce rs and there's nothing else you can do about it except change your passwords.
