Chessy018 Controversy

Philosophic · Mar 20, 2011

I don't know how many of you know about this, but there's already a thread on Sythe in this section entitled 'Chessy018 hacked for 170B+' which shows pictures and describes how one of the richest players on runescape (if not the richest) was phished for his entire bank.

Quick Math

170B+ (Let's just say 170 to simplify the equation, there's realistically probably close to 230B on his account that was hacked) = 170,000,000,000 coins.
Current-rate of gold per mil (gp/m) on Sythe: 70 cents per mil (.70/m)
Current-rate of gold per mil (gp/m) on Rs2gold: Roughly 2 dollars per mil ($2/m)

Pictures

http://i74.photobucket.com/albums/i275/Matteo_G/trade.jpg

http://i74.photobucket.com/albums/i275/Matteo_G/chessy018.jpg

http://i74.photobucket.com/albums/i275/Matteo_G/tab_1.jpg

Response by JaGeX

Mod Mark H said:

Hi everybody,

You may be aware that a player with a considerable amount of in-game wealth was hijacked recently. We don’t want to invade that player’s privacy by naming names, but we understand that this topic is raising a lot of discussion among the community.

As soon as we became aware of the situation we acted quickly banning the hijacker’s accounts as well as removing any items & wealth stolen.

Unauthorised access to online accounts whether it is your bank account or your RuneScape account is a criminal offence, it is illegal in the UK under the Computer Misuse Act 1990, and the USA’s Computer Fraud and Abuse Act 1986 as well as equivalent legislation in many other countries around the world. Jagex have already successfully pursued a RuneScape hijacker in the UK using the above law. You can read about it on the BBC news website here.

We want to send a clear message that hijacking is not clever and will not do you any favours, it is an illegal act and we regularly send information onto local law enforcement agencies.

Currently we do not return lost/stolen items. This is why it is so important to make sure your account is as secure as possible.

Make sure you do the following;

1. Set a Bank Pin. This will help protect your items if the worst happens and somebody accesses your account.
2. Set a Email Address to your account to help recover your account and secure it from others trying to gain access to it.
3. Choose tough Passwords that aren’t easy to guess or very common.
4. Don’t input your Username/Password into other websites! The only website you should use your RuneScape Username/Password for is the main RuneScape website.

Mod Mark H
On behalf of the RuneScape Player Support Team
Click to expand...

News Article

BBC News said: ↑

A British man has been arrested and cautioned for stealing accounts for online game Runescape.

Jagex, creator of Runescape, said it was likely to be the first of several arrests as it tackled in-game fraud.

Online game Runescape has more than 100 million active players and play revolves around collecting and spending virtual cash and loot.

The company said it was working with UK police and the FBI to track down and catch those targeting Runescape.

Crime trail

A statement from the Police National e-crime unit said: "A 23-year-old man was arrested in Avon and Somerset on the morning of Tuesday 24 November by officers from the Police Central e-crime Unit, on suspicion of a number of computer misuse offences."

The offences are believed to be for using phishing e-mails to trick people into handing over login details for Runescape accounts.
Screenshot from Aion, NCSoft
Hi-tech thieves target online games because virtual goods are easy to launder

Once hi-tech thieves have these credentials they plunder the accounts, strip characters of their items and sell off the rare virtual goods for Runescape gold. This virtual money can be traded to others in-game or sold for real world cash.

Current underground exchange rates suggest that 2m Runescape gold costs about Â£6 ($10).

"We have pinned down and identified the handful of ring leaders and we are going after them with both barrels," Mark Gerhard, chief executive of Jagex told BBC News.

"Any online games company will tell you that as soon as the game has value, there's a very small foreign element that tries to exploit that value," he said.

Mr Gerhard said the arrest on 24 November was not the result of something that happened the day before. It was one result, he said, of a long term investigation that had sought out those behind the phishing attack that caught out a "few thousand" Runescape players.

The biggest audience for Runescape is in the US and UK and Mr Gerhard said it was working with forces in both nations to track down the virtual thieves. He predicted that there would be more arrests as Jagex knew the handful of people behind the crimes and where they were based.

Laundering cash

Trade in Runescape game gold is against the terms and conditions of the game and Jagex has made many changes to its underlying code to stamp out gold farming in which players repeat activities that generate lots of virtual cash or valuable items.

Mr Gerhard said its efforts to tackle gold-farming may have forced the thieves to try a different approach.

"Once you close one vulnerability you move the attack surface to another part," he said. Jagex's efforts to tackle farming had removed 90% of the problem, said Mr Gerhard.

"They were going directly after the user credentials and trying to get at the wealth that way," he said.

"Players invest years of time and effort into developing their Runescape character so the theft of a Runescape account shouldn't be treated differently to the theft of any other valuable possessions such as a games console, television or car," he said.

Alisdair Faulkner, a computer security expert at ThreatMetrix, said it was seeing many more hi-tech thieves turn to stealing virtual rather than real goods.

Virtual goods were much easier to launder and dispose of than tangible items such as flat screens and computers, he said. It was a particular problem in Asia where the sales of virtual game goods were well established.

Many thieves stole credentials from networks of hijacked home computers - known as botnets - or used them as proxies to make the theft look like it was coming from a legitimate source.

"For some of these botnets their sole purpose is to act as a gateway to help fraudsters," he said.

ISPs, merchants and other firms were using ways to pierce a proxy and find out who was really in charge of it, said Mr Faulkner.
Click to expand...

References

- JaGeX thread stating the issue: Click here or go to http://services.runescape.com/m=forum/forums.ws?14,15,106,62560262

- News Article (BBC News) Addressing the issue: Click here or go to http://news.bbc.co.uk/2/hi/technology/8386003.stm

- Original article addressing Chessy018's situation on Sythe.org: Click here or go to http://sythe.org/showthread.php?t=1069215

Oh shit?

lil_melo15 · Mar 20, 2011

This is like the 10000000 thread. Enough of this shit.

Safe__me · Mar 20, 2011

Philosophic said: ↑

Orly? Second thread; more information than any other thread on the issue too.

Kthnxbai .
Click to expand...

2nd thread lmao. go to 2-3-4th page theres tons of this shit. Yea someone made irl bank or would've if jagex gave them more time.

someone will probably get arrested for it.

nuff said.

he wasnt phished either the account was recovered by an outside party and you said 'lets do the maths' and then put some numbers but didnt actually find a solution or answer.

xxMarxx · Mar 20, 2011

If i got 5m for every time someone made a "chessy hacked" thread id have a couple phats by now

Dial · Mar 20, 2011

That BBC article isn't even about this, learn to read. It's dated back in 2009.

And isn't Chessy a girl?

niguhboo · Mar 20, 2011

chessy is a girl and l0l they removed her account from play and all the items. I just looked her up on hiscores and it says does not exist. Added on friends list and it adds her but her account doesnt exist