forums.rs

Forums

My account got hacked. Thread is locked

Quick find code: 408-409-947-66270965

of 2
Nuts Wizard
Feb Member 2023

Nuts Wizard

Posts: 9 Bronze Posts by user Forum Profile RuneMetrics Profile
Yesterday night (1/2/2023) I was playing, having fun, and today (1/3/2023 i logged on to see that my bank has been emptied. Somehow i was hacked, 180m (90% of my bank) worth of items is gone. I dont know how to submit a ticket or anything for support, i need help.

I have 2FA enabled, and its still on.

I have a very long difficult to guess password

I have a bank pin

I have never given my information to anyone, and ive never clicked any links relating to OSRS or Jagex in any way. I have no idea how i could have been hacked.

For the most part i just want to know how I can make my account safe again. I still have access to it, ive changed the password, and bank pin, but i have no idea if thats enough, as i dont know how they could have gotten in in the first place.

55 days of progress :(

Please help me

04-Jan-2023 01:17:15

Tren
May
fmod Member
2003

Tren

Forum Moderator Posts: 92,683 Emerald Posts by user Forum Profile RuneMetrics Profile
This thread has been moved to the Community Led Account Help Forum for best results.

The following resources should provide you with the information you need to re-secure your account:
Security tips
Recovering from Hijack [Info]

Because you said that your 2FA was bypassed, pay particular attention to the security of any Linked Accounts
~Tren

Forum issues? ---> See Forum Help
Account issues? ---> See Account Help

04-Jan-2023 01:47:01 - Last edited on 04-Jan-2023 01:47:16 by Tren

Malua
May Member 2006

Malua

Posts: 43,113 Sapphire Posts by user Forum Profile RuneMetrics Profile
Hi there
Nuts Wizard


So, your password was not changed and your Authenticator and Bank PIN were still active?
This indicates, either a third party login (through a linked third party account) or else the hijacker has been given direct access permission to your computer.

You said there are no linked accounts.
Did you click on the 'Manage Steam' button to check for a linked Steam account?

If you are certain there is no linked account, the next check would be to scroll through your browser history between the last time you logged in to a secure RS account and the next time you logged in to a breached RS account.

Check your email and password on the https://haveibeenpwned.com/ website.

Is your Authenticator set to 30 days?
To make it more secure, you should change it to ask for an Auth code at every login.
Forum Community Helper -
Information about Moderators and Community Helpers

04-Jan-2023 10:07:02

Nuts Wizard
Feb Member 2023

Nuts Wizard

Posts: 9 Bronze Posts by user Forum Profile RuneMetrics Profile
My browser history is blank since i was playing, went to bed and woke up with my items gone

Have i been pwned shows all green, nothing there

My authenticator is set to 30 days yes.

My computer was also shut down over night.

I genuinely have no idea at all how this could have happened

04-Jan-2023 11:37:00

Nuts Wizard
Feb Member 2023

Nuts Wizard

Posts: 9 Bronze Posts by user Forum Profile RuneMetrics Profile
If it werent for the fact that they deconstructed my slayer helmet id say that the items were removed by a mod, i dont understand at all :'(

1600 hours of progress man... Just as I bought membership too

heading to bed for the night...

04-Jan-2023 11:39:14

2_Tron

2_Tron

Posts: 23,025 Opal Posts by user Forum Profile RuneMetrics Profile
'
My browser history is blank since i was playing, went to bed and woke up with my items gone
' ... what do you mean by that? What browser?

'
My computer was also shut down over night.
' ... was your computer shut down by someone else?

'
... id say that the items were removed by a mod
' ... moderators do not have information of player passwords nor bankpin nor RuneScape Authenticator.

04-Jan-2023 15:24:03

Nuts Wizard
Feb Member 2023

Nuts Wizard

Posts: 9 Bronze Posts by user Forum Profile RuneMetrics Profile
Malua told me to check my browser history from the time of being on my account to coming on with my items stolen, it was within a 12 hour window that i was asleep for

I shut down my computer before going to bed

I moreso meant when jagex removes items bc of bug abuse or smtg but ive never done that so i was just saying that cause it makes no sense how i coulda been hacked

04-Jan-2023 21:07:53

2_Tron

2_Tron

Posts: 23,025 Opal Posts by user Forum Profile RuneMetrics Profile
Because you set RuneScape Authenticator is set for 30 days, anyone knowing your credentials of your computer and your account can login while you sleep and change everything to your computer/account.
This has happened to many players. Jealous people do that, ruin someone else's precious/valuable passing of time.

As Malua already did mention use RuneScape Autenticator set for every login '
AND
' every use of your bank.

Although it has to be said ... if you are able to install RuneScape Authenticator on a seperate device that even enhances your security by 50% as now someone else needs your computer and that second device with RuneScape Authenticator installed on it to login or use your bank.
Despite using RuneScape Authenticator being used for your bank, your bankpin will remain save-guarding your bank when RuneScape Authenticator would be disabled.

04-Jan-2023 21:41:46

Quick find code: 408-409-947-66270965 Back to Top