Forums

Twitch phishing

Quick find code: 254-255-517-65691682

[#1XZ9WVXS0]

[#1XZ9WVXS0]

Posts: 722 Steel Posts by user Forum Profile RuneMetrics Profile
Thanks for creating this thread, I cannot stress how important reading this can be! I Always report the sites to Anti-Virus companies as they can protect you from going on such links and entering your password!

-Jay S / Down2Skills

11-Jul-2016 18:19:25

Im Poor lol

Im Poor lol

Posts: 3 Bronze Posts by user Forum Profile RuneMetrics Profile
It just happened to me, my name is Ezpz on twitch. I just came back to runescape and checked out the stream and followed the link. I honestly had no clue it was fake. Lost all the gold i'v made since I came back 2 weeks ago. I sent in a ticket to get my 2.7m, 1k magic logs and wiz T robes/skirt and str ammy T back. 4-5m

This just blows.. coming back from not playing for over a year to play for 2 weeks hard grinding magic logs to fall into a dumb track. It seems 100% legit though... Till I got DDOS'd to log in and my password was changed and when I changed it back to find myself in lumby.

Been playing since beginning of runescape, first time to get hacked like this.

12-Jul-2016 11:39:23

TheRedDeviL

TheRedDeviL

Posts: 275 Silver Posts by user Forum Profile RuneMetrics Profile
This is ridiculous, how are us old school players supposed to find this thread if it's on here and not on the actual osrs site, i've just clicked on the bloody link on twitch obviously thinking it was legit and got hacked, lost at least 10m, been playing since 09, never playing again, your security is trash, bye.

17-Jul-2016 12:16:20

Gafandriel
Dec Member 2023

Gafandriel

Posts: 3,637 Adamant Posts by user Forum Profile RuneMetrics Profile
I've seen lots of twitch phishes, but I got caught by a new one last night.

One of RS's favorite "kitten" streamers had either their account hacked or emulated quite well. The phishers then loaded 3k streamers into the channel so that it was at the very top. The stream simply had something listed about how they weren't playing anymore, and for more details we could read their forum post. Clicked the link, which looked legit (been linked to forums from reddit and never phished) and it asked for my login. Didn't think anything of it for.... some stupid reason. Logged in, then it asked for bank pin. Hah! I went and changed pass immediately.

I logged in this morning, and for some odd reason they had moved me to GE, destroyed my slayer helm, and bought an 85k ammy for ranging. I don't have a bank pin, but everything I had was still in bank. All my cash was there was well. I set a bank pin today, still a bit unnerved that they will somehow get new pass and come clean me out entirely.

03-Aug-2016 17:07:35

Oh bother
Oct Member 2022

Oh bother

Posts: 3 Bronze Posts by user Forum Profile RuneMetrics Profile
I definitely fell for one of these today ... it was a really odd experience.

The stream was titled something like "emily is pro quitting streaming" and I was interested in what that was all about, little did I know the link in the description connected me to a phishing website that looked exactly like the runescape log in page. I naively entered in my info, including my authentication number (which I thought to be really weird that Jagex would ask, considering this site isnt the game client)

So it began - I was playing OSRS and all of a sudden my character froze when I was trying to click around, and it seemed as though my internet froze as well because I was trying to navigate around within my browser, but for a few moments it wasn't letting me (99% of the time my connection speeds are super quick) and I found that to be really weird. At this point I didn't think anything suspicious, just that my router was hiccuping or something.

My connection returns and I discover that there is no forum indicating that "emily is pro quitting streaming" exists, and that the link in the description of the twitch stream carried me to a dead end. I found that super weird because it looked legit up until that point.

Really should have looked at the URL, afterwards I looked at it and could tell that the URL was different and not the official Runescape site.

Anyway, here's the odd part. Before this all happened I was training in the Rellekka Slayer Cave, but after my connection returned I was in the Edgeville bank. Right when I logged back on and saw my character standing there I was shocked ... 1) because I was only in the dark a few minutes (3 or 4 max) and I think that would be a huge distance to travel on foot, I don't know how I was moved so fast. and 2) .... seemingly nothing was taken. I still had all my inv and my bank was intact so now I'm just left ... flabbergasted for lack of a better word.

Changed all my passwords and scanned my computer, kinda rattled

09-Aug-2016 10:24:13

Oh bother
Oct Member 2022

Oh bother

Posts: 3 Bronze Posts by user Forum Profile RuneMetrics Profile
What can even be done after you've been victimized by something like this? I feel like I lost motivation to play now. Feels like someone broke into my house almost, no-one should have to feel intruded on. Thankful that nothing was taken but still, this blows.

Anyone recommend what I could do to guarantee safety of my PC / account(s)? a little paranoid now

09-Aug-2016 10:30:25

Quick find code: 254-255-517-65691682 Back to Top