Jump to content

Account Hijacked. First time


SnapOn

Recommended Posts

EDIT

I can confirm, I downloaded a bad version of Runelite.

 

Nothing worse then logging into your osrs account and getting that error that its already logged in. Changed the password and logged in and my account was cleaned out.....

How does this happen? Password was not used on other accounts, My pc is clean... Took a dive into google about leaked databases from runescape?

 

Anyone have idea? Or has it happened to others?

Edited by SnapOn
Link to comment
Share on other sites

3 minutes ago, AnimalMother said:

Which clients you have used in the past incl. steam? you have 2 factor auth for the osrs account?

Recently have been using runelite for the quest helper plugin. (Downloaded the client from the right source.)

I did not have the two factor auth enabled. (thats my bad i guess)

I made sure all accounts were un linked as of now also..

Just sucks...

Link to comment
Share on other sites

18 minutes ago, SnapOn said:

Recently have been using runelite for the quest helper plugin. (Downloaded the client from the right source.)

I did not have the two factor auth enabled. (thats my bad i guess)

I made sure all accounts were un linked as of now also..

Just sucks...

RL is completely safe with all it's plugins, IF you downloaded it from the correct source which you said you did.
Two-factor auth + bank pin is a must imo, now you learned it the hard way...

Maybe you used any other services in the past? Tried other bot clients? Downloaded anything remotely shady in connection to osrs/RS?

Would still maybe make sure ur computer is clean...

  • Like 1
Link to comment
Share on other sites

Had this happen once years ago when I used a OSRS service on my old main, still remember how gutted I was, was only 150M but when it was earned by hand and not through bossing it actually made me quit for a while, have you used any services in the past? Could be something like that.
Best of luck regardless in rebuilding

  • Like 1
Link to comment
Share on other sites

12 hours ago, SnapOn said:

Nothing worse then logging into your osrs account and getting that error that its already logged in. Changed the password and logged in and my account was cleaned out.....

How does this happen? Password was not used on other accounts, My pc is clean... Took a dive into google about leaked databases from runescape?

 

Anyone have idea? Or has it happened to others?

99% of the time it's leaked databases nowadays..
That's why you can't go without 2FA these days :/

  • Like 1
Link to comment
Share on other sites

tbh.. i have good knowledge in this field.

feel free to pm me anytime.

to do :

1# change all your passwords from a clean device/pc. 

its obvious why...its highly likely to have a keylogger, pwd grabber installed into ur pc by now. and you dont want to get hijacked again.

2# disbale all 2nd auth, and re-enable it again.

since they have access to ur pc, they can copy ur current cash files, and use them again to bypass 2nd auth, on any other pc.

3# if you cant locate the malware, i suggest you do full re-installation of ur windows. (not a re-pair mode)

since the malware can be hidden in many many places, even in file-less form, it will recover itself if the coder is smart enough.

common places to check in (startup/task scheduler/drivers...basically its a mess) :/

 

ps, id be glad if you give me a sample :D

 

 

edit:

it doesn't have to be a bad version, it could just be a bad plug-in. which could trigger the malware code by time or event...etc.

Edited by iz0n
Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...