Forums

Hacked AGAIN for the 2nd time

Quick find code: 408-409-709-66164564

TurboK20Z3
May Member 2020

TurboK20Z3

Posts: 5Bronze Posts by user Forum Profile RuneMetrics Profile
For the 2nd time within a month, I have been hacked. The first time it was just the items that were in my inventory. My bank stayed secured. This time, it was everything. Logged in to find myself in Lumbridge, private chat off, and everything gone. The first time 30-40m or so. This time, my whole bank around 250m.

-After the first time I changed my password to something I figured would be more secured. Also my bank pin, just to be safe. When logging in both times, both password and pin were both still the same. I was NOT locked out of my account.

-This time around, I did not even leave my computer. I afked long enough to be logged out due to replying to work related messages on my phone. But I was in front of my computer the whole time. About 10 minutes. When I logged back in I was in Lumbridge.

-I have 2FA and have had it both times. I do NOT use any sketchy software, nor click any external links. Just Runelite and mobile. YouTube and official wiki for guides.

-I have a separate email specifically for my account, it is used for nothing else but my OSRS account. There are no emails or suspicious activity on it, and checking if it's been pwned comes up green.

-There NEEDS to be a tracker that tracks login locations, IPs, even a service that will send you a text message when an unusual login has happened will help.

I do not understand how the hell this keeps happening. I'm fed up, and the fact that Jagex will do nothing about it to support players that continue to become victim to things like this just baffles me. This may be the end of my grind in OSRS now. I've reached my peak, and I cannot continue to support a game that continues to allow things like this to happen.

07-Jun-2020 15:29:43

Malua
May Member 2006

Malua

Posts: 36,512Sapphire Posts by user Forum Profile RuneMetrics Profile
It sounds like either you have a RAT on your computer or you keep clicking on dodgy links and are giving permission for the hijacker to directly access your computer and ip address.

The Bank PIN is usually a very, VERY secure bit of information. Even JMods don't have access to our Bank PINs.

For a hijacker to breach a Bank PIN, they either have direct access to your computer or you have been phished for it.

If you genuinely don't know what happened, stop using Runelite and see if that stops the hijack intrusions.
Also, stop viewing Runescape content on social media (Twitch, Youtube, Facebook) as it is very easy to be deceived by fake RS content on social media websites.
Forum Community Helper -
Information about the Community Helper Team

07-Jun-2020 15:41:26

TurboK20Z3
May Member 2020

TurboK20Z3

Posts: 5Bronze Posts by user Forum Profile RuneMetrics Profile
I never click on any dodgy links, I'm extra careful with looking at the address bar. I've run a full scan on my computer and it turns up with nothing. Even if somebody was able to have my password and bank pin, that doesn't explain how they were able to get past the 2FA. I was on my phone right in front of my computer while it happened, whoever did it definitely didn't make the transfer from my computer or my phone and those are the only 2 devices that account has logged in on before.

07-Jun-2020 17:27:58

Malua
May Member 2006

Malua

Posts: 36,512Sapphire Posts by user Forum Profile RuneMetrics Profile
The whole idea of being deceived into clicking a dodgy link is you are unaware of doing so.
You wouldn't click otherwise.

"I afked long enough to be logged out due to replying to work related messages on my phone."

Maybe you weren't logged out due to AFK, maybe the hijacker logged you out through using the RAT.
The hijacker HAS to remove your access to the game for the few minutes they need to steal your stuff. You both can't be logged in to the same account at the same time.

If your Authenticator is still active and your Bank PIN is still active and they failed to protect your account there is only one explanation.
It may be hard to credit or accept but the hijacker has had access to the device you play the game from.
Forum Community Helper -
Information about the Community Helper Team

07-Jun-2020 23:52:32

TurboK20Z3
May Member 2020

TurboK20Z3

Posts: 5Bronze Posts by user Forum Profile RuneMetrics Profile
So just ran 2 full scans from 2 different antivirus for my PC, and one for my phone. Everything came up clean. Also, while I was on my phone I was still sitting in front of my PC and the account was logged out the whole time. I'm just as dumbfounded on how this is happening.

08-Jun-2020 16:06:47

CensasPT
Jun Member 2020

CensasPT

Posts: 2Bronze Posts by user Forum Profile RuneMetrics Profile
The same happened to me. 2nd time this month. Also change pin, password and the email. got authenticator both on the rs account and email, and still they were able to enter my account and bank! lost about 400m total in the space of 1 month. I'm really fed up that Jagex doesn't even check this, gives you a refund or anything. specially after buying bond with irl money, which was stolen as well. IP tracking should be done and if proven to be a hack or a dodgy transaction, to have a refund and the other account banned!

12-Aug-2020 14:49:10

Tren
May
fmod Member
2003

Tren

Forum Moderator Posts: 84,639Emerald Posts by user Forum Profile RuneMetrics Profile
@ Censas PT - For best results, please create your own thread for getting help with your particular situation.

In the regular discussion forums, it is appreciated that you check to see if there is already a thread open for the topic you wish to discuss.

However, in the Community Led Support Forums, it is much easier to give everyone the help they are looking for if each user creates their own thread about their issue.

Every user's situation is somewhat unique, and it can get confusing as to which post is to which user, when more than one player is trying to get help on the same thread. Advice given to the original player may not apply in each case. Also, when tacking your situation on to another player's thread, those helping may recognize the thread as one where the issue had already been resolved, and may not notice that a different situation has been added to that thread.

Thanks
~Tren

Forum issues? ---> See Forum Help
Account issues? ---> See Account Help

12-Aug-2020 16:52:47

Quick find code: 408-409-709-66164564Back to Top