Someone got on my account...

So, recently i got a old account of mine unbanned which had a partyhat + other rares on it from 2006.

I posted in selling p hats section of the forums and have been talking to a few people on skype.

One guy offers me 900usd i turn it down, he continues to talk to me and offers me paypal say's he will go first etc etc.

Then he says he will buy it of me in game for 7.3bill and wants to see the rares, I show him the rares in game and stick them in my bank. He then proceeds to offer me more and more.

His final price which i said yes to was 7.6 bill ( is green going for 7.6 bill in game )

He say's come to f2p, i go to change worlds and then as soon as i click to change worlds it logs me out.
I try log in say's I've not logged out from my previous session.

I continue to try and i look on my Runescape classic account, it say's i am logged in a world i did not even click on. I message my account and then it log's off. I then continue to try log on my account which still say's i'm logged in.

After a few minutes i finally get on stood in the same place with my partyhat still in my inventory. ( i have a bank pin )

The first thing i do is try to drop my cash stack. It say's please try again in 4 minutes.

I got to my bank try to get in the bank and it say's "please try again in 1 minute"...

that tell's me someone went on my account and obviously tried to get past the bank pin but then place the account back to it's original spot to make it look like it was just a server glitch.

When i first told the guy i was talking to on skype someone is logged on my account he replied, it's "probably world glitch".

The guy i have been dealing with has been pestering me all day to sell and kept upping his price, the guy has a website and to make profit on a phat you need to buy it for a lot less than street value in game.

Immediately after i get back on my account he offers me paypal. But a lot less amount.

I've scanned my PC, used a friends PC to transfer my rares to another account, changed all my passwords on my friends PC.

I'm not going to mention no names as i have no proof it was this person who got my password (my login name can be seen when you add me as a friend) I would say my password was pretty guessable given enough try's for that particular account given enough trys.

but i am very suspicious.... anyone have any thoughts or input on the situation and any free antivirus scanner websites i can use. I've used avg + 1 more both came up clean...

any help appreciated - thanks

 

I've had good experiences with Webroot in the past, however part of staying safe online is simply choosing where to go and where not to.

Before I go to a new gold site or site I haven't been to I try and scan it with something online, whether it's using Webroots built in system or using something else. Additionally, adding 2 Step to every account of mine with value.

When I was younger I got "Drive-by Ratted" (I don't remember the exact terminalogy) I opened a page it had a java application and then my computer was Keylogged, lost however much at the time.

Use an updated browser, I know Google Chrome and Firefox are recommended and there are plugins and add-ons you can run to make it safer. (Adblock, etc).

Sorry if this is a bit of a rant, just detailing my personal experience.

 

I appreciate your reply and input. Thank you

 

Did you have an authenticator on the account?

Make sure you authenticate any account you're holding valuables on and also 2 factor the email address it is attached to.

 

2 step is a MUST if you value the account.

Before checking sites where you can sell your phat for irl money/gp, make sure you have the site scanned. this is always something you want to be careful with when working with high value accounts and items. RWT has a lot of precautions that need to be followed closely for the success of the seller[you] and buyers. Basically, just authenticate your account for the time being, and try not to visit any sketchy sites.

 

no authenticator

my password was easy to guess and only he and any random person who may have added me would of seen my username for login

 

I'm assuming lucky guess but try scanning with malwarebytes just in case/

 

That makes it a lot more likely to happen, of course. Did you use your password on the partyhat account for any other accounts at any other time to your knowledge? Your password used on other platforms, if the same or similar, might have been part of a database leak.

 

Was just a password for runescape accounts haha

I do hope someone did guess my password as appose to having a virus. But i've downloaded nothing.

 

So a unique password, yeah? Never used anywhere else? And not similar to any other pw you've used on other sites? Lately a LOT of databases have been leaked. I make it a habit to change all my passwords bi-monthly on my most important accounts (email/xbox live/etc).

 

I try to limit my skype transactions because of this.

 

It such a shame that the world we live in that people have to stoop so low to do stuff like this sorry for your loss mate

 

yes all my passwords are unique for every site i use.
I left some bait on my accounts and did not log in for 2 days, no one has logged onto any of my accounts since. so far so good. looks like a password guess.

i never lost the phat, they could not get past my bank pin

 

Sounds like you dodged a bullet, grats on not losing your partyhat! Those things are expensive as hell!

 

Can you PM me on how you got unbanned? What did you say to get the unban? I have 3 accounts with full sets of rares on them (Mask Set, Santa, Phat Set, Cracker, etc etc). I'll give you $100 PP if I get them unbanned.

 

Maybe you can ask jagex to confirm if someone logged on your account?

 

authenticator doesn't do much to be honest with you. The only thing authenticator can do is if they only hack your RuneScape account and not your e-mail address. The most common way others get hacked is through RAT link (a rat link can look as simple as a regular Gyazo or screenshot, but has external links embedded that downloaded PUP files or Potentially-Unwanted-Programs (aka VIRUSES). The best way to stay safe on RuneScape is to have Two-Step Verification/authenticator on ANY AND ALL E-MAIL ACCOUNTS (RS related or not) and recovery questions. Dashlane is a great program to create/store long and random passwords. It will enter the password for you if you set it up correctly, so it avoids being keylogged. Also, Malwarebytes PRO is the best antivirus to prevent hackers, and a VPN is always useful. Hope this helps!

 

The most common way people get hacked is from database leaks and using the same pws/emails

 

someone can find your password thru Skype? That is scary

 

thats reason why i serval noob accounts and my rares spiltted into more than 8 accounts.

ALL GOT DIFFERENT EMAILS AND Two-Step Verification/authenticator on.
its also worth mentioning,that you remove any meta-data,if you post pictures or share them online.

finally i keep all my users data on
AES Hardware Encryption for Secure USB Flash Drive. ITS COSTED ME SOME MONEY,BUT 100% WORTH IT.......

Also all my account have complex passwords.. plus i use all time vpn to browse internet and play.btw i use 2 different ones for own specific reasons.btw i posted and made my account through library pc.(BOTH EMAIL AND FORUM REGISTER) .THIS HOW YOU STAY SECURE IN INTERNET ALL TIME