Jump to content

Welcome to Rune Tips, the first ever RuneScape help site. We aim to offer skill guides, quest guides, maps, calculators, informative databases, tips, and much more to help you get the most from the Massive Online Adventure Game, RuneScape, by Jagex Ltd © 2009.

Report Ad

Welcome to Forum.Tip.It
Register now to gain access to all of our features. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more. If you already have an account, login here - otherwise create an account for free today!
Photo

Has anyone else been hacked after not playing for a while?


  • Please log in to reply
23 replies to this topic

#1
Puccioso
[ Display Name History ]

Puccioso

    Rat Meat

  • Members
  • 27 posts
  • Gender:Male
  • Joined:31 October 2012
  • RuneScape Status:Semi-Retired
Ok so, I'm not really pissed or whatever, I've pretty much quit playing RS as I did before, since I have no time for it. But a couple days ago, when I decided to get back at it (to play very moderately uh xD) after about a year without logging in, I found it hacked in a rather weird way...I had all my items still, with the most precious ones being in my inventory, noted, and all my cash was gone. Same thing happened to a couple of friends of mine...
I can't figure it out...I'm sure my computer's clean from any malware, and anyway I haven't logged in for about a year, while it looks like it was hacked about 3-4 months ago. My password was changed but it took me no time to recover it, and since then I've had no more problems. Did this happen to any of you?

PS: Oh I also found myself with nothing equipped sitting at GE.
My Runescape Toolkit Client
Core:
Skill data handling: 100% (for now)
Skin system: 80%
Script system for user made addons: 20%
Data (will add methods to retrieve it online, but for the features I want to add, like advanced skill/profit calculations, I need to have it all at hand at anytime):
Item database: 0%
Skill database: 15%
Bestiary: 0%
Features:
Grand Exchange support: 100%
Highscores support: 100%
Calculator support: 100%
Skill support: 80%
(All the stats showed are provvisory, further updates to my client might affect progress on those fields)

#2
Boredom RS
[ Display Name History ]

Boredom RS

    Unicorn Horn

  • Members
  • 172 posts
  • Gender:Male
  • Location:Missouri
  • Joined:23 April 2012
  • RuneScape Status:P2P
  • RSN:Boredom
Honestly if just your cash was gone and none of your items, I would check your recent offenses. Sounds like Jagex may have caught you macroing. I am not saying it is what happened, but it sounds like when they were wiping the wealth from accounts.
Posted Image

#3
Ginger_Warrior
[ Display Name History ]

Ginger_Warrior

    Dragon Slayer

  • Members
  • 8,044 posts
  • Gender:Male
  • Location:Sheffield, UK
  • Joined:10 July 2006
  • RuneScape Status:P2P
  • RSN '07:CN G Warrior
I thought I'd been hacked after nine months of inactivity but after checking a few things and punching in a few sums, I can't possibly have been. All my cash was gone, but my items were still there, a lot of them could have been sold too, so it just didn't make sense that I'd been hacked. I think looking at my herblore level, I must have spent all my stuff on that, and put the rest of my cash in MTK before quitting.

There's probably a rational explanation. I have no macro offenses, proven or otherwise, against my account.

#4
Puccioso
[ Display Name History ]

Puccioso

    Rat Meat

  • Members
  • 27 posts
  • Gender:Male
  • Joined:31 October 2012
  • RuneScape Status:Semi-Retired

Honestly if just your cash was gone and none of your items, I would check your recent offenses. Sounds like Jagex may have caught you macroing. I am not saying it is what happened, but it sounds like when they were wiping the wealth from accounts.

Nope, the only offense I have is back in 2009 when I was doing merchanting and downloaded a crappy auto typer that got me a 3 days ban :\
And furthermore when I logged in (after more than 1 year not playing), it said my last login had been 3 months earlier, can't remember exactly but I think it was from China?

I'm sure I didn't spend them either, also because I had not even 1 gp in my bank and I would've never spent all my cash on skills. Furthermore I found myself with nothing equipped and all my valuable items (about 150m of stuff) sitting in my inventory, noted :?
My Runescape Toolkit Client
Core:
Skill data handling: 100% (for now)
Skin system: 80%
Script system for user made addons: 20%
Data (will add methods to retrieve it online, but for the features I want to add, like advanced skill/profit calculations, I need to have it all at hand at anytime):
Item database: 0%
Skill database: 15%
Bestiary: 0%
Features:
Grand Exchange support: 100%
Highscores support: 100%
Calculator support: 100%
Skill support: 80%
(All the stats showed are provvisory, further updates to my client might affect progress on those fields)

#5
Boredom RS
[ Display Name History ]

Boredom RS

    Unicorn Horn

  • Members
  • 172 posts
  • Gender:Male
  • Location:Missouri
  • Joined:23 April 2012
  • RuneScape Status:P2P
  • RSN:Boredom
Weird lol.. that is very strange, probably a gold farmer that got lucky and just forgot about it or something
Posted Image

#6
Puccioso
[ Display Name History ]

Puccioso

    Rat Meat

  • Members
  • 27 posts
  • Gender:Male
  • Joined:31 October 2012
  • RuneScape Status:Semi-Retired
But then why did this happen to, like, two friends of mine? I even began to think of a Jagex conspiracy xD
My Runescape Toolkit Client
Core:
Skill data handling: 100% (for now)
Skin system: 80%
Script system for user made addons: 20%
Data (will add methods to retrieve it online, but for the features I want to add, like advanced skill/profit calculations, I need to have it all at hand at anytime):
Item database: 0%
Skill database: 15%
Bestiary: 0%
Features:
Grand Exchange support: 100%
Highscores support: 100%
Calculator support: 100%
Skill support: 80%
(All the stats showed are provvisory, further updates to my client might affect progress on those fields)

#7
kapeg90
[ Display Name History ]

kapeg90

    Spider Egg

  • Members
  • 69 posts
  • Gender:Male
  • Location:UK
  • Joined:3 December 2008
  • RuneScape Status:P2P
  • Clan:Not in any clans
I'm sure this has happened to me too. I stopped playing for almost a year, and I lost a few items and such. It can't be macroing, as I am a legit player - I've played for years. I was hoping my PC wasn't infected. I think it was hacked as apposed to anything else, though. I remember getting a strange message left in my notes from someone who got into my account.

I'm glad they have the new system in place now, though.

#8
Mercifull
[ Display Name History ]

Mercifull

    Post Junkie

  • Members
  • 16,130 posts
  • Gender:Male
  • Location:In a house where everything is coated in cat fur
  • Joined:18 June 2004
  • RuneScape Status:P2P
  • RSN:Mercifull
  • Clan:Tip.It
There are people who "specialise" in trying to recover accounts from retired or inactive accounts. This coupled with the often woefully inexperienced customer support staff can often mean accounts can be lost to "hackers" with very minimal information. Information which could be gleaned from database thefts from fansites or even from social networking sites like Facebook or Twitter.

I too once had my account stolen when I was quit for a few years. Nowadays Jagex gives us some much more secure tools to keep safe so always take advantage of them and activate JAG for enhanced security.

Posted Image
Mercifull <3 Suzi

"We don't want players to be able to buy their way to success in RuneScape. If we let players start doing this, it devalues RuneScape for others. We feel your status in real-life shouldn't affect your ability to be successful in RuneScape" Jagex 01/04/01 - 02/03/12

#9
Ginger_Warrior
[ Display Name History ]

Ginger_Warrior

    Dragon Slayer

  • Members
  • 8,044 posts
  • Gender:Male
  • Location:Sheffield, UK
  • Joined:10 July 2006
  • RuneScape Status:P2P
  • RSN '07:CN G Warrior
To a certain extent, I don't mind that situation. If that did happen, it's my fault for putting the information on Facebook in the first place and making the information available to the public, not Jagex's customer services team, and I accept the risk that if I quit and I'm not longer monitoring my account's activity, someone might try to take advantage of that. There has to be some level of personal responsibility, and now that we have JAG, if you fail to make use of it then you don't really deserve much sympathy.

#10
Puccioso
[ Display Name History ]

Puccioso

    Rat Meat

  • Members
  • 27 posts
  • Gender:Male
  • Joined:31 October 2012
  • RuneScape Status:Semi-Retired
In fact I don't mind it at all, as I've retired from Runescape anyway. I didn't know it was possible to recover an account with that minimal information tho, I feared someone managed to hack into the password database and was clever enough to hack just unused accounts :\ Meh, I'm being paranoid now.
Still that's pretty much weird, I don't use social networks and this the first time I join a fansite, I've always been very careful in keeping my account protected. I wonder how they could possibly steal informations to hack into my account... I suppose the old system was really flawed then (I don't even remember how password recovery worked before)
My Runescape Toolkit Client
Core:
Skill data handling: 100% (for now)
Skin system: 80%
Script system for user made addons: 20%
Data (will add methods to retrieve it online, but for the features I want to add, like advanced skill/profit calculations, I need to have it all at hand at anytime):
Item database: 0%
Skill database: 15%
Bestiary: 0%
Features:
Grand Exchange support: 100%
Highscores support: 100%
Calculator support: 100%
Skill support: 80%
(All the stats showed are provvisory, further updates to my client might affect progress on those fields)

#11
Mercifull
[ Display Name History ]

Mercifull

    Post Junkie

  • Members
  • 16,130 posts
  • Gender:Male
  • Location:In a house where everything is coated in cat fur
  • Joined:18 June 2004
  • RuneScape Status:P2P
  • RSN:Mercifull
  • Clan:Tip.It
Sometimes people forget what they have put online and what questions they used. Years ago you may have put as one of your recovery questions something such as "Favourite album ". Now years later you might post on another forum thread such as The "Your favourite....?" game! what that was without realising the connection. For an inactive account this might be all the information required to eventually persuade Jagex they are you.

Posted Image
Mercifull <3 Suzi

"We don't want players to be able to buy their way to success in RuneScape. If we let players start doing this, it devalues RuneScape for others. We feel your status in real-life shouldn't affect your ability to be successful in RuneScape" Jagex 01/04/01 - 02/03/12

#12
Trey
[ Display Name History ]

Trey

    Scorpion Pit

  • Members
  • 714 posts
  • Gender:Male
  • Location:Netherlands
  • Joined:9 September 2007
  • RuneScape Status:P2P
  • RSN:Trey
  • Clan:Efficiency Experts
Did you check your money pouch?

Posted Image


#13
Puccioso
[ Display Name History ]

Puccioso

    Rat Meat

  • Members
  • 27 posts
  • Gender:Male
  • Joined:31 October 2012
  • RuneScape Status:Semi-Retired

Did you check your money pouch?

Yes. Took me a while to notice it, when I found it I thought for a second that I hadn't been hacked, but unfortunately it was as empty as it could be :(
My Runescape Toolkit Client
Core:
Skill data handling: 100% (for now)
Skin system: 80%
Script system for user made addons: 20%
Data (will add methods to retrieve it online, but for the features I want to add, like advanced skill/profit calculations, I need to have it all at hand at anytime):
Item database: 0%
Skill database: 15%
Bestiary: 0%
Features:
Grand Exchange support: 100%
Highscores support: 100%
Calculator support: 100%
Skill support: 80%
(All the stats showed are provvisory, further updates to my client might affect progress on those fields)

#14
DarknessRises
[ Display Name History ]

DarknessRises

    Chicken Feather

  • Members
  • 11 posts
  • Gender:Not Telling
  • Joined:3 November 2012
  • RuneScape Status:Semi-Retired
I agree it sounds like someone botted on your account and Jagex wiped your money. At least you got the account back.

#15
Puccioso
[ Display Name History ]

Puccioso

    Rat Meat

  • Members
  • 27 posts
  • Gender:Male
  • Joined:31 October 2012
  • RuneScape Status:Semi-Retired

I agree it sounds like someone botted on your account and Jagex wiped your money. At least you got the account back.

Impossible, I have no offences besides the one I got back in 2009. I think someone just managed to recover my account in the last year, but I don't get why he stole 80m cash and left me with more than 150m in items :\ Furthermore he left them all in my inventory.
My Runescape Toolkit Client
Core:
Skill data handling: 100% (for now)
Skin system: 80%
Script system for user made addons: 20%
Data (will add methods to retrieve it online, but for the features I want to add, like advanced skill/profit calculations, I need to have it all at hand at anytime):
Item database: 0%
Skill database: 15%
Bestiary: 0%
Features:
Grand Exchange support: 100%
Highscores support: 100%
Calculator support: 100%
Skill support: 80%
(All the stats showed are provvisory, further updates to my client might affect progress on those fields)

#16
firebird308
[ Display Name History ]

firebird308

    Bear Fur

  • Members
  • 293 posts
  • Gender:Female
  • Joined:12 August 2006
  • RuneScape Status:P2P
  • RSN:SilverFox30
  • Clan:PVM Skilling to 99
Since they were in your inventory, I think they must have gotten interrupted before they had a chance to transfer them. Dunno why they didn't return and finish though.

Silverfox30.png


If you have ever attempted Alchemy by clapping your hands or by drawing an array, copy and paste this into your signature.
^^^At least I'm not the only crazy one


#17
chenw
[ Display Name History ]

chenw

    Ice Giant Melter

  • Members
  • 4,953 posts
  • Gender:Male
  • Location:Putting the Fiyr on the Pyre
  • Joined:24 July 2004
  • RuneScape Status:P2P
  • RSN:Tim ChenW2
My previous (and as far as I am aware, my only) account compromise, it was probably as weird as it could be.

My cash pile were still there, in fact it grew LARGER, but some of the more 'valuable' items at the time (mostly collection items, such as approximately 8k Monkfish, about 6 Dragon Platelegs/Plateskirts, various other bits and pieces) were missing, I had assumed he GE'ed them for me.

IE, the hacker GE'ed some items in my bank, but left my cash pile in tact.

However, Trade limit was still in place back then, so I assume it was because of that. But it was a very weird hack situation.

tim_chenw2.png
6,924th to 30 hunting, 13,394th to 30 summoning, 52,993rd to 30 Divination

Kiln Record (Post-EoC): W 25 - L 0, 14 Uncut Onyx, 8 Jad hits received (Best record: Two in the same kiln)
Obby set renewed post update #2: 0

QBD drops: 21 crossbow parts, 3 Visages, 1 Kites, 2 Kits

Max Port Score [2205] Achieved: 27th April 2013 (World 2nd)

 

Farmyard Rampage ranking: 12th, 50,000 Kills.

 

Dragon Pickaxe Drops: 1 (Times after I first entered Battlefield: 2h)


#18
Barney.S
[ Display Name History ]

Barney.S

    Goblin Armour

  • Members
  • 133 posts
  • Gender:Not Telling
  • Location:Awesomeness
  • Joined:9 October 2012
  • RuneScape Status:P2P
Yeah, it's most probably a situation of social engineering recovery.
I was hacked while I was inactive also. Although I did not get as lucky as you did. Unfortunately since the fansite databases have been compromised in the past, it is easy to recver a player if he or she was inexperienced enough to use some of the same details on a fansite that one used with RS account. That's what happened to me anyway.

#19
RSBDavid
[ Display Name History ]

RSBDavid

    Ice Giant Melter

  • Members
  • 4,113 posts
  • Gender:Male
  • Joined:18 April 2006
  • RuneScape Status:P2P
  • RSN:Davidd
Time to post something useful!


TL;DR: Accounts are never 100% safe, working customer service sucks, and I like 3.14.

Ok, so working as a customer service agent and supervisor for a major cellular telecommunications company in the technical support department and general customer service as well as having experience as a white-hat contracter, I learned a lot about ticket systems, customer personal information handling, and attitudes of both representatives and supervisors towards that data. This is something I have personally dealt with.

Story Time!



How the above story relates to Runescape is basically, as long as someone knows enough information about you or has infected you with malicious software, it is only a matter of time until they can access your Runescape account. Customer service agents and supervisors have protocols they have to follow in certain situations. In the story above, the supervisor was not at fault for giving access to the hijacker as the hijacker provided enough information to pass by as the actual owner. There is practically no way the supervisor could have known that the caller was the hijacker.

Now another note; Since the person in the story was away and did not log into the account for 6 months, it made the story provided by the hijacker even more realistic. Most people check access logs for stories like this. How this relates to Runescape is most players start playing before college and take a break during school for 3, 6, and even 12 months or more at a time. Also, people tend to move around, lose interest in playing, and take breaks. The longer you do not access your account, the easier it is for someone to hijack it. I am not saying that if you don't login for 6 months, someone will take your account. I am just saying that it will become easier to hack, even with JAG or any security measures in place.

With a game like Runescape, with JAG enabled, I can guarantee that if someone has your email, IP, and time, they can recover your account. The reason I added the criteria of time into play here is because it takes time to research the victim and obtain enough details about them. It takes time to develop a highly plausible story to send Jagex. It takes time to perform multiple attempts.

This has happened to me. During the fan sitehack wave about a year ago, the email I used with RuneScape was the same email I registered with a specific fan site, was obtained from the database. The passwords were totally different. All of my in-game passwords are a randomly generated string. After my email was obtained, it was only a matter of time until the hacker obtained the rest of the information from either database entries or logs from the fan site.

I blame Jagex for lack of common sense and detective skills. The IP address which last logged into my account was 10,000 miles from where I lived and was on a list of spamming and hacking IPs relating to both Minecraft, Runescape, and other games. I blamed them for making it too easy to recover accounts. I had an alternate account I never logged into since 2006. I legitimately forgot the password. Using a proxy, I submitted my real IP and information which was listed on an archived forum site from then provided a heartwarming story of why I haven't played in 6 years. Only 6 hours after the recovery request was submitted, I received an email saying it was successful. I know people make mistakes and stuff like this happens with Runescape or with other companies all the time. I have been on the other side and personally made that mistake of allowing a stranger access to someone else's account.

Posted Image

[Software Engineer] - [Ability Bar Suggestion] - [Gaming Enthusiast]


#20
Puccioso
[ Display Name History ]

Puccioso

    Rat Meat

  • Members
  • 27 posts
  • Gender:Male
  • Joined:31 October 2012
  • RuneScape Status:Semi-Retired
Wow, now this is very interesting. I guess some very useful information could be extracted from what you said, at least to make accounts a bit more protected. Still it's impressive how Jagex doesn't mind IPs when recovering accounts... Thinking about it it's not so unreasonable, as there could really be someone who moved thousands of miles from his home and decided to get back on Runescape, and I suppose it would be really hard for them to determine whether it's the truth, or just someone trying to steal an account. They can't deny all this kind of requests as that would prevent legit password recoveries, so they have to accept them all.
I must say, I've never looked at it this way.
My Runescape Toolkit Client
Core:
Skill data handling: 100% (for now)
Skin system: 80%
Script system for user made addons: 20%
Data (will add methods to retrieve it online, but for the features I want to add, like advanced skill/profit calculations, I need to have it all at hand at anytime):
Item database: 0%
Skill database: 15%
Bestiary: 0%
Features:
Grand Exchange support: 100%
Highscores support: 100%
Calculator support: 100%
Skill support: 80%
(All the stats showed are provvisory, further updates to my client might affect progress on those fields)




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users