I have only used EpicBot for botting on my recently created OSRS account. I have never entered my password on a website other than the official oldschool.runescape.com/runescape.com.
I did provide the bot with my username and password. Interestingly enough this bot never logged in on its own using the provided username/password.
Yesterday, someone logged into my account for about 6 hours. All of my GP as well as my rares were missing when I finally regained access. My inventory contained 5 new random event equips (mime legs/gloves, camo legs/hat, lederhosen hat) 2 diamonds, 1600gp and 5 varrock teletabs.
It appears as if they ran a moneymaking bot and then cleaned out all the easily sold valuables.
I offer this thread as a warning to those who use or plan on using EpicBot.
DO NOT GIVE EPICBOT YOUR RS 07 USERNAME/PASSWORD
