Forums

Hijacked account with security

Quick find code: 408-409-150-66281048

osrs login

osrs login

Posts: 6 Bronze Posts by user Forum Profile RuneMetrics Profile
I have tweeted and submitted a ticket regarding the situation. I last logged off 5/28. I logged back in on 5/30, and everything 90% of my bank was missing just like the person who started a forum I will tag. I have every line of security available down to face id to enter authentication app. Per google security, Malware full scan, Norton security, Mcafee security, Windows defender, there is not a single breach of my personal information. I have been safe for hundreds upon hundreds of hours on the account, played 17 years without issue. And all of a sudden the day of or after tweeting with mod ash about bounty hunter rewards not looking like the original items my acc was wiped. Per jagex support I had a 3rd party entry into my account which would be impossible. They would need email username and password, which is different from login username and password, the username is from 2004 only I and jagex files would contain it. They would need face id to enter authentication, they would need to bypass two factor authentication on my phone. MY PHONE WOULD HAVE TO NOT notify me of an outside entry into my personal accounts, someone would need personal access to my computer or personal phone with all login information. My 2factor is set to my phone which differs from if my pc was compromised. All ends of my account security are locked and still secure showing only my sessions. There are no message relays on my email. The account email login history is untouched and shows only my i.p addresses. I believe there is corruption or a bug that has occurred. Trade logs could easily be pulled to see if items were transferred. I am not able to add any more security to my account than I have always had. Sadly I cannot trust investing more time into an account that shows safe but has still been hit, and there is no response or help from jagex support team. Link listed is pictures of all proven security and scans showing nothing. https://trevor12127.imgur.com/all

01-Jun-2023 18:08:49

osrs login

osrs login

Posts: 6 Bronze Posts by user Forum Profile RuneMetrics Profile
Here is a copy of a situation that is exactly the same. Without any help or resolution for the player. Please help bring awareness to the situation and shed light on the little efforts that are put into helping the customer basis who keeps the game running. I have received nothing but automated responses in relation to the situation. It repeats how to secure my account and that items are not able to be returned but that isn't the problem anymore. I want to know my account is secure but there is nothing more I can do and there is nothing more I can see.
https://secure.runescape.com/m=forum/forums?408,409,947,66270965,goto,1

01-Jun-2023 18:11:50

Wassep
Jul Member 2022

Wassep

Posts: 411 Silver Posts by user Forum Profile RuneMetrics Profile
I'm really sorry to hear that happened... unfortunately there isn't much Jagex can do in terms of lost items from hijack/scams.

If you are going to rebuild on the account i'd strongly recommend changing up your passwords and following the security tips .

I'd be careful of anything you click, as even with 2fa the login session token can be stolen. I don't think you can have Norton, McAfee, and Windows Defender all on at once, so I'd choose one of those and stick with it as one may be hindering another's function.
Here to help <3
Still confused?Heres some great resources:
Runescape Support | Game Suggestions

01-Jun-2023 19:22:36

Malua
May Member 2006

Malua

Posts: 43,113 Sapphire Posts by user Forum Profile RuneMetrics Profile
Hi there
osrs login


I recommend checking the 'Linked Accounts' tab in account management.
If you see any accounts linked in there, unlink them. Click on 'Manage Steam' to check for a linked Steam account.
If the only accounts linked are your own, you need to review your security on the linked account website as it is likely the hijacker has gained access to your linked account and used it to gain access to your RuneScape account.
When a hijacker uses a linked account to gain access to a RuneScape account, it bypasses all the Jagex security features. The only security operating on that type of login is the security in place on the linked account website.

If your RuneScape Authenticator is still active and hasn't been disabled, your password is still active and your Bank PIN still active, it points directly at a linked account login bypassing security.
Forum Community Helper -
Information about Moderators and Community Helpers

02-Jun-2023 00:22:28

osrs login

osrs login

Posts: 6 Bronze Posts by user Forum Profile RuneMetrics Profile
Thank you for replying. But I have never ever linked any account to my runescape account. All logins and passwords are different. The auth is on my personal phone not tied to my pc. Google security runs the 2fa, and it says 100% clear. I have gone as far as checking linked accounts in my email, active sessions even checking the i.p address login history onto the email, and its ALL CLEAR. It is 100% only me who has entered my account. I have notifications for any outside entry other than me. Your talking about someone hacking with 0 information for 300m worth of items, all while being invisible. Yet jagex support said there was sign of a 3rd party login into my account. But why is all lines of security still to this moment in time saying otherwise.

02-Jun-2023 15:25:45

osrs login

osrs login

Posts: 6 Bronze Posts by user Forum Profile RuneMetrics Profile
Also I wanted to make it clear, my email and in-game info are totally different. My authenticator is on my phone not attached to my pc. I have been safe for 15+ years playing this game I do not share any info with anyone. No one has access to my pc or my mobile device. I have all history of searches from 26-30th showing I was only on youtube so I clearly wasn't phished, as well as I have anti phishing security active always. Also safe search is active always. Im stating it is IMPOSSIBLE someone bypassed every line of security to target 300m, they would go after something of worth. Matter of fact if a hacker had all my information and 2fa and can control or bypass it all, wouldn't they sell the account too? My account is well over several hundred dollars on the black market, but they just left it untouched? None of it makes sense nor does any of it add up. This all occurred the day of or day after tweeting mod ash about how bad the new BH rewards look and they aren't even similar to the original items that are being upgraded. I believe jagex support is keeping important information from me in relation to how it can be fixed. They auto reply with ways to keep your account safe, but i have all that. There's no more safety features I can add to my account. There's no point in playing if security is easily bypassed and no red flags are shown. No point in wasting time on a game if it could just happen again and I never know why.

02-Jun-2023 15:45:05

Quick find code: 408-409-150-66281048 Back to Top