Anyone hacked lately?

[Yay0siris]

I got an email from jagex today saying they suspended my account and there was a link redirecting to a login page on runescape. lawls.

[Piu]

After 2009 +- most hackers that succesfully hack hack with help from Jagex.

Especially if you pass is changed after the hack I guess also your hacker has had help from Jagex, this because I don't think the hacker has any reason to change your pass if he ever had it, because he doesn't care about the account anyway, just about the gp's and the stuff worth gp's on it.

If he didn't care about the gp's but about the account itself he probably would have changed the password, but then why removing the cash on it?

 

He was most likely recovered. Not hacked. Recovery system assigns you to a new password of your choice after being accepted.

[deyan2]

After 2009 +- most hackers that succesfully hack hack with help from Jagex.

Especially if you pass is changed after the hack I guess also your hacker has had help from Jagex, this because I don't think the hacker has any reason to change your pass if he ever had it, because he doesn't care about the account anyway, just about the gp's and the stuff worth gp's on it.

If he didn't care about the gp's but about the account itself he probably would have changed the password, but then why removing the cash on it?

 

He was most likely recovered. Not hacked. Recovery system assigns you to a new password of your choice after being accepted.

Yes I know, but I also concidered that as being hacked actuallly.

[lordkafei]

Wow... 4 different phishes in the past 24 hours.

 

#1, a pretty email full of graphics:

 

RuneScape Account-NoticeTuesday, November 8, 2011 5:06 AM
From RuneScape Tue Nov 8 03:06:16 2011
X-Apparently-To:	 [obscured] via 209.191.91.167; Tue, 08 Nov 2011 03:07:28 -0800
Return-Path:	 <[email protected]>
X-YahooFilteredBulk:	 98.139.91.194
Received-SPF:	 none (domain of yahoo.com.br does not designate permitted sender hosts)
X-YMailISG:	 k_01DZoWLDtwjibwkJXufQqCm6oFEQSIH56NE9zZ2Nf5cs75 jy7boCcrbIwKyxek.8Y00l5.H1Kn11dLCSkRDDs0wWjf8h2Yk4hDYNqrfuMK SqR5h10GuR9LMv4p5jWKJ3rBZfhDe.n33fFPw8JeNRjzOq4dkwFAvMhQNLqt acsbKr9RhrqBXUU5B.3SrcF1aEAFJL7MyLyiPDhdKpRKTJGTu52em3FQcX3D nwvKOAHEEkaTyfyaUcEhsQY1ai9FSujvQ.1BJ4IiUKYes3szXvmj5AjQ3qbK WOLb1UAIJlsRoP54WHHY6fJmz3E4r5tjRUctCdtnN8AM54tzN.ugrNm7wPZm eaLyFFAJpUOsXo9OFusQfL_0._YDGB0B8BZ0BrN08jGRgJxO5z9quFxeDHTU UVUdpmL_TqLQgGhX2xf129R1z28hj2EQZrc3KWRI1AHY1o1Y9i2L953IvgPb mLXIPvm2qLuSjO6YXjON9arvlJAUoSld_56KqZL4nTNkr68PbtSV6Z9jI66d QNvu1dLV5ruYVTSC2yn5djhIfoVfewLY1DVM_CqMNYGH9tOfk3Wwe3gDqxEA m7gQCsdYQY_MHuFwNFkKf61HWji9oA_BZvUOyATKavZJYLdAkTGnfjOcSm4z dxwtAj0ZW2rxSs3YwvsCma3q2dOGEgYX_Q1A0BlSt7dxl2MoHfThR1.Js0.g nUFt_hxkJggQqC1aSk5_CIWaERcL58TROeiUNzdG_6J6oHLtwFvHMbkS1grG OCA2AcarQZqRgRiwiROC9QpBNlhxiQ8Hh1U60fqDbWyg8esRxpIKEmTRKRKi rzTozfgH2pqM_5jlG4yaebVY.dYyuUAWj5NshFmP_NyS_uWqYgyKj2n056Ie UDRN7SJQMEARyKBGZmfThIit0uhF8elVGVDCiwTBuOFZhiURn9h8zmTpEMA2 iHo4rBl_6ovLaYfx_Mwf2tsI4eUMLjDwWEDYfgZqFKSaoCayZHxphVcQOKoH WmokCjgH4dNFc2CHqgrSNUe823FqimraQWk1aNM7rbW3CDGYNQgGOX8k4Wn5 fP1NSt7MEH48jb3JuYSSXRuQn_icS7wSOo1d38YOeTUtbTmm3_41jHqw6FYg 8VfPckjddlV2BPXgJj.bZ7cpcjSQKQ--
X-Originating-IP:	 [98.139.91.194]
Authentication-Results:	 mta1076.mail.ac4.yahoo.com from=yahoo.com.br; domainkeys=neutral (no sig); from=yahoo.com.br; dkim=pass (ok)
Received:	 from 127.0.0.1 (HELO nm8-vm0.bullet.mail.sp2.yahoo.com) (98.139.91.194) by mta1076.mail.ac4.yahoo.com with SMTP; Tue, 08 Nov 2011 03:07:28 -0800
Received:	 from [98.139.91.63] by nm8.bullet.mail.sp2.yahoo.com with NNFMP; 08 Nov 2011 11:07:26 -0000
Received:	 from [208.71.42.205] by tm3.bullet.mail.sp2.yahoo.com with NNFMP; 08 Nov 2011 11:06:26 -0000
Received:	 from [127.0.0.1] by smtp216.mail.gq1.yahoo.com with NNFMP; 08 Nov 2011 11:06:26 -0000
DKIM-Signature:	 v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.br; s=s1024; t=1320750386; bh=YwgCjdV6YC8vxX1jUTm/OnCPPzu2Q3egOA9Sksq+C5I=; h=X-Yahoo-Newman-Id:X-Yahoo-Newman-Property:X-YMail-OSG:X-Yahoo-SMTP:Received:Reply-To:Sender:Message-ID:From:To:Subject:Date:MIME-Version:Content-Type:Content-Transfer-Encoding:X-Priority:X-MSMail-Priority:X-Mailer:X-MimeOLE; b=6kSiWJDj2IswLp103J3u7cKjxAtaXSVY/iM55iAZ7IRZHXLKec4td3uahx6ePdE/0oO/kXf9uN3TS+ExLD4H5YAq31IRRGgIdnmXf/vW3xX3jVz/lJhfK1Js47zLl6NGmaxhBXNf+xqh6h7FxfWOqgcwRUwZIHfA93uBNXkx5qk=
X-Yahoo-Newman-Id:	 [email protected]
X-Yahoo-Newman-Property:	 ymail-3
X-YMail-OSG:	 .cuedFIVM1mUISWm6HVGRimu1UarSR3vt7oSrSjEOBUOfUJ 6KqIAweV.YMONBs0OhyWnKAbC.iTmo7Ol_ZpnacIgvlDrIdxqHvEd6CAHwtN ynxASPXj9nuYCS2P3l7pbAESSXrZGQ93GyMvqvX_Pgb70035w572jys_RHSb 68Shsh2Ux_wxJMkzWy0qq4G4fGW3Y.De6SzlhLII.bKLeLmybZpMA0JlM4Y_ POFn5CPpGKgWN77ZXBYiiOmhaq61gLh98D6GESrLsSBVWIscXLeYGmAW9JgR .r90xAMWJhEdOVxje1fpyrRWQGAB4Otn0zlbcfilUY9tmdslceSGlw5NhS0o VORlXG623Hv6_EM8PiMX5UMUW03xYv5R9GRdCFk2Txsoa2ASigOJU1N8qCp3 wcg2ril_CMV2oF1OSWbI4s1KrOyLfq2uQS0u638C0ZXVzU5GIpvcBS1RXvDJ TiubB0tkNkz6U7xT.8hahLroX1koQETiSs7SxiZW1s8cMJF4PdHUb0xEdqCq Mg1Os86AXTirGrKOxUB5l8Rpeiy4LrVSwRSqvMYfx1D4.4g8Rzv8vdD4uDI5 i4lJc_qmspDrSAAVb3j4eLVnVp0XdBMwGNO14W.bvDmTf3fJkaFYTnLeiAsq BJTLBX_ubu.9V55.oub7eyCGjzf.G2pQgP6Bi7aMV_9ia8sZw1HHnZvyJyi. uZ4sRPXQo3Wa1sph.p2ZBgN2guU3m02j6Jd1TwH3AwMOYB001WqOue5XMGei W3Qbe0p.TmXNdWb2wUdNRo.K_eyGKokoeo_dWlC5msTdsF3.ekS_MX7zjHi6 NwXlTeswcvINGw_vk
X-Yahoo-SMTP:	 j244tSyswBDa9B8ddewZ9L1mIHn.bQDY64s-
Received:	 from rc ([email protected] with login) by smtp216.mail.gq1.yahoo.com with SMTP; 08 Nov 2011 03:06:18 -0800 PST
Reply-To:	 <[email protected]>
Sender:	 [email protected]
Message-ID:	 <502AE35BB47BEBA1446E72667AF8C6CB@rc>
From:	 "RuneScape" <[email protected]>  Add sender to Contacts
To:	 [obscured]
Subject:	 RuneScape Account-Notice
Date:	 Tue, 8 Nov 2011 19:06:16 +0800
MIME-Version:	 1.0
Content-Type:	 text/html; charset="utf-8"
Content-Transfer-Encoding:	 base64
X-Priority:	 3
X-MSMail-Priority:	 Normal
X-Mailer:	 Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE:	 Produced By Microsoft MimeOLE V6.00.2900.5512
Content-Length:	 11852

 

Received: ([email protected] with login) which, as usual, comes from Liaoning, PRC (http://www.ip2location.com/123.189.63.223)

Bogus login domain: http://whois.domaintools.com/xologin.com

 

#2, a plain text email warning me about selling my account:

 

RuneScape Account - login validationTuesday, November 8, 2011 4:44 AM
From RuneScape Tue Nov 8 02:44:56 2011
X-Apparently-To:	 [obscured] via 209.191.91.163; Tue, 08 Nov 2011 02:44:57 -0800
Return-Path:	 <[email protected]>
X-YahooFilteredBulk:	 222.105.141.129
Received-SPF:	 none (domain of runescape.com does not designate permitted sender hosts)
X-YMailISG:	 hzhrn5cWLDvQUUtw0bXV9APMnSvnUiaMUuqoauR5uC83ii0W YkM56FcngYLS_gPC6u.SDxLLNQioCjlCGtCvQJRTEDLm4Po9Hg6j9TXXGGAc mB_eXTVN4ktHClPQkuy69Pktr04FUVQ89gb64KSDQ38E3SldB7wGnf6M3NR2 a_bJtclpT8epfB0JvUfTmYhPGQbrFnovseHwE11GSwMiyBVJ_oZOo3I6DlgX ICtpwuLl5k0ma0rHVL1CaG12QkoTijt0v1jif.4xiuoneS99ciV8xpEEsu1l irWRvXc3brD7IjG3QeCXTsAiWJ6k7pnXlx_WE1UrEVOPUePyMs1EU12nNqXF SgzVuUmdp8Uctm7p7lrLEuvhx9WtoRywRFFVmYIMKttwfY_wr8PEKU36VjwS 0MdhiKy80zHz4XPf3yysD.K7CykyIEOiTAZuq_tqhPlMDN_qIwxeX68BLr1d 0L4x2LlNJX7.AXoSia26gtLlVdaae4VhXrUOVyrplg4XDGHpf8QBUREbPI3Z x9gb9Slzk._wto8l3C0QJoA7hQ3nddTzhM.TUhAcdD7jztE0JAdTmigdJ0Hu qOESyZgXW2DrXHYnPmkayE8WWNUMMwMKyugf.4xt9lv6XV2Zq7yQHL9YrLGU Dtsrpc1t.Kfq4cL8L5mON7nluYliJmYWEAPM60Rwj4Q.uozW_5RwWq1R0FOI DYtJST4jcnwlfnIANIVWuwDScDCfMysO1ZobqhU.IFQ4VLJvYFdTZIs3A3W1 rmXfBZIM_RJShUFlEsb6Q4kKeLmco3HrjHtc5io0VXuJ7LCaNF9gJnkryzXJ hyvVfpxl68BOOjnEiRg7jFv610wNOrtOVbxvFT6_FGNGhtOPT.B4ZCEtPp93 2i0EZTzhbzCj5YdWAw6D2yLY5RGI0aDb6TzzcidcOO7ncpmYqyXt0cHDaFId nKp3wmt5XbNZTj2ie8q7_uSucT7k8p7ihL9wpeSxv2VRrqXSfsnA0AKSs7ZQ L53HMSqy3sv32Dk_0DxMdGJVv8fO2Xw4NOhfXkS0SkGqjXo4_LTNlTdp
X-Originating-IP:	 [222.105.141.129]
Authentication-Results:	 mta1145.mail.mud.yahoo.com from=runescape.com; domainkeys=neutral (no sig); from=runescape.com; dkim=neutral (no sig)
Received:	 from 127.0.0.1 (EHLO runescape.com) (222.105.141.129) by mta1145.mail.mud.yahoo.com with SMTP; Tue, 08 Nov 2011 02:44:57 -0800
Received:	 from lmp (unknown [248.3.176.3]) by china-980c20c91.com (Postfix) with ESMTP id 78B4F28DB4F for [obscured]; Tue, 8 Nov 2011 10:44:57 -0000
Date:	 Tue, 8 Nov 2011 18:44:56 +0800
From:	 "RuneScape" <[email protected]>  Add sender to Contacts
To:	 [obscured]
Reply-To:	 <[email protected]>
Subject:	 =?GB2312?B?UnVuZVNjYXBlIEFjY291bnQgLSBsb2dpbiB2YWxpZGF0aW9u?=
X-Mailer:	 Foxmail 5.0 [cn]
Mime-Version:	 1.0
Content-Type:	 text/html; charset="GB2312"
Content-Transfer-Encoding:	 base64
Content-Disposition:	 inline
Message-Id:	 <[email protected]>
Content-Length:	 3992

 

Received: (unknown [248.3.176.3]) via Seoul, ROK (http://www.ip2location.com/222.105.141.129)

Bogus login domain: Again, http://whois.domaintools.com/xologin.com

 

#3, another pretty email with graphics:

 

RuneScape Account-NoticeTuesday, November 8, 2011 2:19 AM
From RuneScape Tue Nov 8 00:19:39 2011
X-Apparently-To:	 [obscured] via 209.191.91.170; Tue, 08 Nov 2011 00:21:06 -0800
Return-Path:	 <[email protected]>
X-YahooFilteredBulk:	 213.165.64.22
Received-SPF:	 pass (domain of gmx.de designates 213.165.64.22 as permitted sender)
X-YMailISG:	 sETXGxQWLDuh4ATBrx9RLX_Glow5yUlhaVw.iE_f3SwWKVwo LOVHLpa1ldiLzXL7lmXrsyaF43pOwoWF7HFpgG9rYuatBznhSl699cXMIVta _bJJtvSfixRiO324Wq.fC3drXJb1N7aCFZcPDQhw2CXwM7bqjt6_WpXhBDo2 Qisax5lIccP5s1al61oawFwSB8uU_0d_TCtLshayP5KLzZYaJSrK7GErAGjU AmL2DEsyRn74puU7.uZnUUqAkj648Xuz82csoEyldk6enNQULQKwyPr9jqaQ tMTPp9.WjJ3uovdiS2SAMdZXqyH3qxbwshBZOmqxzAK1w29JTs5n0dhN54aJ QBginlBqjijQtX_qw8IdOIckoVFZCzzx8If2oX.cTbSMY4F39wMo4N1ZNPwh meJVDC48IWXkrXzU4ZLn78EGUNWFDmyg0D4myO8tDYO0zA_KR9Kk0TYg4rfP hqqk9EP30vsWtoB8XctGhDfgKRpCAk4gZaC3zzIdL90va7.95GKOT5lwHSVp R1TYhgjk_50tjXeig_DGeqm7z_xUWz0aX3O2u41Jxe2vFhDeZs_waT4MGONA z7h9gdBT4RyEoRaDCPsg0hQ1xPm9IqIAW46r2dNwiUrCwep.lNk9ZtoW7iDw CisbtAsv6N2cALEebWEFAsOxiDrXRAirWZWqd7XBjWUTQv2xqxMM7Z8PcExh WDOJzJ2.JIY7Y57OmDBMRTUKX9n9Vds_Dkn0XBwuGXp_9dJ6stzEeP8g51SQ uR0TZQvkx1I6YwqYbCQf7reYTx9qmW.15GMoOsm0AV1Poz7C615TIU2Nc3Sr d9lzFw1N7kZl7EG6.clORG0ageL4ckZPx9.bmoTl8T7gvHZu9Ku.1oxb5F_M g2bDtbwYlK.EnsyuP5AP6h9PIippwE_of_p.rj6JmttvqOpfeEe7Pb.yBYnR EHVEfUoTD1.SZm6qWgvp6hWqWZlMqXjn.vQnvPFfUZV7GiTDYwEx3q.Bp6Dv KT9BL3.V2XijP8mCBL1NPuBGi4FdsDz_seuTsgpA0UlB2MWOuXOmUNsXuZ.S I7ErEVfL03w3LAcIAHBIi8FA5G_waE4RNK.qlCIwba0Xf2QAC_82j5Z7ky5l 6T6_u7drn.4BWhoDooGB_HP.1Ka54ey7xlTBKy4WwV.UcEBKPilSiGI-
X-Originating-IP:	 [213.165.64.22]
Authentication-Results:	 mta1069.mail.mud.yahoo.com from=gmx.de; domainkeys=neutral (no sig); from=runescape.com; dkim=neutral (no sig)
Received:	 from 127.0.0.1 (HELO mailout-de.gmx.net) (213.165.64.22) by mta1069.mail.mud.yahoo.com with SMTP; Tue, 08 Nov 2011 00:21:06 -0800
Received:	 (qmail invoked by alias); 08 Nov 2011 08:21:03 -0000
Received:	 from unknown (EHLO nygfpglm) [222.186.15.149] by mail.gmx.net (mp016) with SMTP; 08 Nov 2011 09:21:03 +0100
X-Authenticated:	 #45963441
X-Provags-ID:	 V01U2FsdGVkX18rPaI8WpgrHT5UxNwLA3R5WCspiosJJvzAhkg2vo EqIVobt1tK83mS
Reply-To:	 <[email protected]>
Sender:	 [email protected]
Message-ID:	 <D39559851C677CFBC9E634F4D1133F42@nygfpglm>
From:	 "RuneScape" <[email protected]>  Add sender to Contacts
To:	 [obscured]
Subject:	 RuneScape Account-Notice
Date:	 Tue, 8 Nov 2011 16:19:39 +0800
MIME-Version:	 1.0
Content-Type:	 text/html; charset="utf-8"
Content-Transfer-Encoding:	 base64
X-Priority:	 3
X-MSMail-Priority:	 Normal
X-Mailer:	 Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE:	 Produced By Microsoft MimeOLE V6.00.2900.5512
X-Y-GMX-Trusted:	 0
Content-Length:	 11832

 

Received: (domain of gmx.de designates 213.165.64.22 as permitted sender), which resolves to Munich, DEU (http://www.ip2location.com/213.165.64.22)

Bogus login domain: Again, http://whois.domaintools.com/xologin.com

 

#4, another pretty email with graphics:

 

RuneScape Account-NoticeMonday, November 7, 2011 4:48 AM
From RuneScape Mon Nov 7 10:48:44 2011
X-Apparently-To:	 [obscured] via 209.191.91.163; Mon, 07 Nov 2011 02:49:02 -0800
Return-Path:	 <[email protected]>
X-YahooFilteredBulk:	 72.30.238.133
Received-SPF:	 none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG:	 lKe6VvIWLDtmWY3C7TCFe_wY0LqW_v7f.iinRi0YeGKJz2fH JokMhpJkT7_lvFmmNCxtEBRKJ_.D9AlO_JrP0tBXPn6pL1t0mTjwj6Sjo.sA sT4QOd5zaFiwfMc6I5sN5qNmxabRyO_czw4j8R1UJKNXjLadApcnMhNLHR7A oGNb8mUb8tvbzpYSCXkLm6t6F0QnBPajsjyfQoAQD6GH23NvqBkQFiZJe9UR ZmN0ooba305SzjYjN.xd.rc4pI4PvEU2UkoAkdE5pSWC6y48hnmv4Zgy09EY bxYay0hpj2ONzR_ftjQoOGhPFsLLCgCfdphZ4asuqzohi2PVCkZIpt8xI9bw mYwWO6GHHCQ2R6WQCN9PsMmxW4cM6BqEwRH_AB7jTeQccoyZiC9pQe1aEgBq 3xwfITKbMoId8A5.NfZs7NpsNGI9SYVF2ZG_dZUQMB.teiB2T0zW72dThtW_ _2MGD1AziQ8e3xkE87Hh3OEvUf1KaRkuwoAAJxb.vr.nxKyo.2m05j1cUQCK WatXGW16PsIysn8teyIi.nRzAJyQmQgzlxfw_.iAAFczDmBMTkyMsFNiIauR oOwc806U9b6q2opWqA3ath5eaSUA3_aaa5nCYnyARST9KDubq6yUkBwSz0kA PXlFaHirK.i7GQORJElSe5NQil22WENdtWOFJpPJoQSWzkiVVlSj8GOH5Qa2 lHySWKF3JfvV3.FVIVss8sZ8CgGHLrGPrpXDKWL93pX70nwY9aJ3ICvRbSgp NcpC1o09dqxNXfhmIF91VdEtDjX54osuvwiPWJ_n_jSQnDc8nXI4WjmK701a 06F8rFZKHf7z_hbQd1YKxjwApyhn_nNY_HIOsCc67AJF_wgha1PU.lwgGtoR M_VdrMA_8REnzqEfYTN4qOG8A9Zz1P.EOAA2Sb4DGgF7LkjC7185kncyLgOn PWe71nQgL81yQLxV5WT61.6TjR4ajSBNywOgNvM347ax2_jyIVFQU0TlrO4u nMr1D4E-
X-Originating-IP:	 [72.30.238.133]
Authentication-Results:	 mta1152.mail.sk1.yahoo.com from=email.runescape.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received:	 from 127.0.0.1 (HELO nm33.bullet.mail.bf1.yahoo.com) (72.30.238.133) by mta1152.mail.sk1.yahoo.com with SMTP; Mon, 07 Nov 2011 02:49:02 -0800
Received:	 from [98.139.214.32] by nm33.bullet.mail.bf1.yahoo.com with NNFMP; 07 Nov 2011 10:48:47 -0000
Received:	 from [98.139.213.10] by tm15.bullet.mail.bf1.yahoo.com with NNFMP; 07 Nov 2011 10:48:47 -0000
Received:	 from [127.0.0.1] by smtp110.mail.bf1.yahoo.com with NNFMP; 07 Nov 2011 10:48:47 -0000
DKIM-Signature:	 v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1320662927; bh=h7btGKmnOAjIZmtyY3HwhDru23e2kI9+qeAzNnhZdKg=; h=X-Yahoo-Newman-Id:X-Yahoo-Newman-Property:X-YMail-OSG:X-Yahoo-SMTP:Received:Message-ID:From:To:Subject:Date:MIME-Version:Content-Type:X-Priority:X-MSMail-Priority:X-Mailer:X-MimeOLE; b=Iy2g7KGyZw8QVGUu+aVGaUAOqoYKxKQzvx7DVT2wdTpkAtc4elUHrmsXSLV0qKgN2PRwfMV+k+nyIlqeU3fSSBEaVargM+mc03wtApLDyQy3vdfboefjmxvIHxcTdBFfeR8BdP5ZmaRHXPXPBuZGsOkcCVgAZ3d4//emCmNwkUM=
X-Yahoo-Newman-Id:	 [email protected]
X-Yahoo-Newman-Property:	 ymail-3
X-YMail-OSG:	 teq3vEAVM1nJK4Kf5ybXhSSm8IdMRODNrchoJ0MSelmepUl 6o3pEkDBvWahir2aj5kFRB9ljX_36TCKRdw.0.HcS1iPHbc6Zv90n.5Br546 hjTEz.zEjk1j.z2TaQnLw45TJud_3AvCznt32LJl1AS1D7aptUfnnIC60Asi MAngdQ60HGfm2ck2ywjgibgsMXwiXC7KgmXriPOLfoDnkpdv7A4E6M7F3ClN LNtUfHeTibFgQubBhy7ArxUofyrFfStU8kxyk69mqza3rhE8FZ8jJwN7Hv8q BKuiAvj3Xd4Qhkzlys1gVoQPsPSjVQNhXr8j.R787zB8YapXcpkWqHklKYbV yDh5DhWUsCP7epg3gIPyVNd5Fz.jghsXibd8AlkMRi19b5.IPT2cNyCqI9Qj ykAs8GZrUEub6VO5xWuWZpA6WZcLcWtBc8yD5wFZwDxt4ZqJBxo6ip8q6_bl 52hv4IVV4nk6b68yR68E.DRRymi8tIyx0ZgAYrQYqw5jtLvYbW4H8kO6g4qV TTGtElj4XmFptmvBbPIsmlT6IIuB.1CMugj4OEGDhcLEnKkGVl8VIPPrdn2S U12.lTSpmhOA39taB.y7xT5pVKOyXhMzyj8IUPpZRPFjSXquP6XKzsPiF52u n9iQQCmYx4dms2xOZrJvAQtAAYgAXH5kIqZ7SornsawuGOZySwOk4yQSqF46 MN.Ezy6zyjHZPwp7viKMthpo7A.Pki9NQ2.ME5apQpjOZZ4tCpLbfqw--
X-Yahoo-SMTP:	 03l0R9aswBBfbjThy3CLsS6CQ_WcS.E-
Received:	 from ogfybzbs ([email protected] with login) by smtp110.mail.bf1.yahoo.com with SMTP; 07 Nov 2011 02:48:46 -0800 PST
Message-ID:	 <8116CE3DEBD8D16D2D4EE793E2A0750C@ogfybzbs>
From:	 "RuneScape" <[email protected]>  Add sender to Contacts
To:	 [obscured]
Subject:	 RuneScape Account-Notice
Date:	 Mon, 7 Nov 2011 18:48:44 +0800
MIME-Version:	 1.0
Content-Type:	 multipart/alternative; boundary="----=_NextPart_000_0285_01DB2CAE.1F3567E0"
X-Priority:	 3
X-MSMail-Priority:	 Normal
X-Mailer:	 Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE:	 Produced By Microsoft MimeOLE V6.00.2900.5512
Content-Length:	 11253

 

Received: (from ogfybzbs ([email protected] with login)), which resolves to Fujian, PRC (http://www.ip2location.com/120.40.31.121)

Bogus login domain: Good ol' http://whois.domaintools.com/co.cc

 

Final tally: 2 China, 1 South Korea, 1 Germany for a sum total of 4 douchebags.

[Galaxyg]

I myself was hacked last year by someone who I thought was my friend. They were 'secretly' gathering information about me just to steal my items which I had for over 8 years. Of course, I was in tears when I got back from a week camp. My pin was deleted in 3 days time which is not very secure.. Jagex don't give a damn really.

[Arceus]

I got hacked once (password unchanged), last year, but I think I'm safe now.

[Platinum_Myr]

That's... crazy.

[Stev]

Please remember that this is not the place for threats and accusations.

 

Also, searching IP address locations online gives you an approximate location which is usually of the ISP, not the actual person. For example, if you searched my IP, you'd get the exact coordinates to a location near my ISP, but not at all my house.

 

EDIT: The previous off topic (and now removed) discussion stops here - PM a moderator if you have any questions. Further off topic posts will be removed. Thanks. - Kimberly

Edited June 14, 2012 by Kimberly

[lordkafei]

After several weeks of relative quiet, the jackwagons are back out in force. I've gotten 8 phish emails in the past 5 days.

 

One particularly caught my eye. The subject exclaims You've got 20 Free Spins!

 

The phishing URL itself is in the Netherlands.

 

Sadly, it sounds just like a marketing stunt Jagex would do. If only the phishing fool realized how I actually feel about SoF. :rolleyes:

[Dazzuh]

or someone at Jagex wasn't paying much attention to whoever tried to "recover" my account

 

This, it is sometimes incredibly easy to recover an account with just a few known details about the account/person. This has happened to me before and it's why all my recovery questions are now completely random and untrue.

 

Jagex are very flimsy on this issue, not taking enough care.

[The Dark Lord]

A quick question: Can you view your own email address when logging into your Runescape account?

 

Backstory: Got hacked not long ago, changed password via recovery. All was well for almost a week, then I got hacked again and my email was hacked too. I cannot recover my email because Microsoft has shitty customer support, so I provided Jagex with a shitton of info that I hope will lock my account, as requested.

 

I figure if they could either bruteforce/guess recoveries, there's not much I can do to keep it secure since obviously Jagex has poor security. I cannot find a virus that could have sent my passwords to the hackers, but if you cannot even see your email while on a Runescape account, then that raises the possibility that my antivirus just sucks ass and there is a keylogger on my computer.

 

It's absolutely ridiculous how little information is needed in order to recover an account. You can get information needed for random people on these forums by just looking at their name-change history, forum join date (to approximate when they probably started playing the game), among other things. Even if you're careful about revealing personal information (like any smart person on the internet), you're still at risk.

[Tres]

My friend also got once hacked because of tipit db leak. i guess i was lucky because i didnt use same username, pw or email when i registered here so they not connected to my rs accounts.

 

to avoid getting my email hacked i use my own domain forwarders (virtual email addresses) so no real email address is connected to my important rs accounts.

 

Also not having youtube, facebook, twitter etc profiles keep me more secure also.

 

Jagex recovery system is joke and older the account is, easier its to get it recovered...i have myself proved it when i recovered my own noob account with only information used was approx creation month.

There is alot of hackers that focuses for RSC era accounts because they are easiest to recover, higher chance for old holiday items...I have personally seen someone bragging how many 9hp and bunny accounts they got recovered.

[pkinyou]

I was actually hacked for the first time EVER earlier in the week... I logged on and I was in Lumbridge, no items on me and my bank pin reset. Luckily they didnt see that I had 44M cash on me, probably why they reset the pin, but yeah- I was honestly shocked, I have NEVER told anyone my password, I rarely go to any sites or download things, nobody I know even plays anymore (seeing as I'm 21 and I've been playing since i was in 6th grade lol).

 

But anyways, i reset my password and thought that was good.. WELL I tried logging in again and I noticed my password (my new one) didn't work either! Ugh, so annoyed... So I had to change everything again.. When I finally did log on I saw the IP address was from somewhere in China, reported everything to Jagex but I highly doubt anything will come of it. I'm just annoyed and mad that I actually got hacked.. Sigghh..

[The Dark Lord]

When you email customer support and ask to have your account locked, does it stay locked indefinitely?

[@Dan3HitU]

When you email customer support and ask to have your account locked, does it stay locked indefinitely?

Unless someone or yourself try to unlock it.

[Arceus]

I asked them to lock my account while I was on vacation but they didn't do it for me. I posted on a forum thread though.

[harryhoggs]

i recently got hacked by some goldfarmers :(. the good thing is that i had loads of cash from the farming :D