Recently 3 of our members including 1 staff member have been hacked and stripped of all their stuff, even though they all had a bank pin and an authenticator.
I have of course asked how this could happen, unless they have a dodgy link, each denied this, I'm not too sure what to think, so thought I'd ask here.
I do not have a reddit account, but they inform me there are a lot of threads on there about it and it is becoming increasingly common.. Have any of your clan members been hacked whilst watching a twitch stream? And if so and it is becoming increasingly common why arent Jagex warning people?
Thanks in advance for your comments.
Proud to say Clan
Consentus
is now 13 Years old and still going strong.
I'd recommend checking out
Community Led Account Help
for more advice, but there have been a lot of fake Jagex streams on Twitch where a recording of an official livestream is played by someone impersonating Jagex. These streams are full of phishing links and are view-botted to make them appear as having a lot of viewers. That could be the root of the issue.
If you click any links, these fake streams send you to a phishing page that mocks the real RuneScape login page where it asks you to log in, enter your bank PIN and authenticator code, etc. which gives a hijacker everything they need to access your account.
Sorry to hear your members got hijacked, but they need to take some extra precautions regarding their own account and computer security. It's possible that they now have viruses and/or malware on their device and should be cautious about other personal info, such as banking and credit card information, being compromised as well.
Sorry to hear about this it seems to me they have fallen for a scam of people impersonating the Runescape stream on twitch. They either was led to believe they was getting double xp, or entering a give away, these are so common on twitch.
Which leads the player to a fake site of Runescape, which looks the same, so they probably entered their password, and then got Ddosed.
The way they work is there is a steam with a name similar to a popular streamer with a title saying something has happened to them. Nervous fans who don't know any better then click on the stream, and are prompted to a link in the description that appears to be the Runescape website. They type in their information to post on the forums, and the website owner logs into the account, sells all their items, and in some instances, their account, for thousands of real world dollars. The fact that these suicide accounts have been around for so long is an indication of their success and impact on the community.
I would urge your members to run malware scans on their computer, change email/passwords as safety measures.
Best of luck.
| Leader of
IVY
Click here for
Account Help
| An International Pvm/ Skilling Clan |