Account hacked...help me figure out how

Hey all,

I recently had one of my alts hacked. I'm not sure how it was hacked though. I'll lay out the facts that I know and if anyone has any guesses then please share.

Only 1 of my accounts was hacked for around 250m. All the used barrows equipment and untradeables were left untouched. This account had no pin or 2fa. Other accounts had same pw and more wealth and weren't touched.

Runelite and OSBot are the only two RS related apps that I use. I've had both of those for a long time. The hacked account was the only account that used OSBot. Only official scripts were used. They were both pay to use scripts. I don't think this would be the cause but it's the only thing I can tie to the hacked account.

Account has a username login that's the same as ign. I know I wasn't keylogged and that no one has access to my computer. Not really sure what happened. Password was not changed by the hacker.

Any thoughts?

 

Hey all,

I recently had one of my alts hacked. I'm not sure how it was hacked though. I'll lay out the facts that I know and if anyone has any guesses then please share.

Only 1 of my accounts was hacked for around 250m. All the used barrows equipment and untradeables were left untouched. This account had no pin or 2fa. Other accounts had same pw and more wealth and weren't touched.

Runelite and OSBot are the only two RS related apps that I use. I've had both of those for a long time. The hacked account was the only account that used OSBot. Only official scripts were used. They were both pay to use scripts. I don't think this would be the cause but it's the only thing I can tie to the hacked account.

Account has a username login that's the same as ign. I know I wasn't keylogged and that no one has access to my computer. Not really sure what happened. Password was not changed by the hacker.

Any thoughts?

If you used anywhere else the same login details that might be the reason (Database leak)

 

[RuneChips]

Database leak, brute force?

 

[cowep]

Database leak, brute force?

What is a brute force leak?

 

I think he was inferring two different possibilities.

 

[Drager]

Maybe a database leak somewhere, possible phish?

 

[SeanSecret]

Sounds like a database leak that had your login/pass on it. Other accounts wouldn't be touched if the login wasn't out there.

 

[REH]

Database leak is likely, but also simple social engineering. You say it's an alt, but did you ever play the account and actually talk to people on it?

 

Nah, it had been banned for years. Had someone on here train the account a good bit. Password was changed before and after service performed.

 

[Zo7ar]

Always use an authenticator. Best type of security there is to offer IMO.

 

[Sillymonkey]

Always use an authenticator. Best type of security there is to offer IMO.

You can sign in to your account via the website and disable the authenticator without being required to input a code from the authenticator though lol

Same thing happened to me recently, OP. My 07 account was hacked after being inactive for years - hacker didn't change the password but they DID decide to give the account P2P and bot green dragons on it.

Got curious about the mobile version of 07 recently and tried to log in - message saying I was banned in Nov for botting. Appealed and it was basically insta lifted...luckily it had about 1M worth of d bones and hides still on the account when it was banned or I would have started with absolutely nothing.

 

[Howadigi23]

thats why always get a pin at the very least your last failsafe.

 

[Sillymonkey]

How long ago did your hack occur? I only recently learned about the whole "OSRS JMod that was hacking people" thing.

If I'm reading one of your replies right and the account was previously banned/is now not, it makes me wonder if he had brought it back from the grave to take the wealth....although it seems like his targets were mostly larger - stealing hundreds of bils in total.

 

[Clinton4Jail]

check your email address against leaked databases it is quite scary some of the shit on there lol.

 

check your email address against leaked databases it is quite scary some of the shit on there lol.

It's an old account with a username login.

 

[Stall]

Account share on any RSPS with the same ign/password by any chance?

 

Never

 

[agd555]

Just happened to an account of mine. Only used it on Tribot. How do I look it up on a database?

 

[deadmou5e]

it's probably something to do with your e-mail. it's very hard to tell how you got hacked sometimes if your not knowledgeable in this type of stuff. but it's hard for us, sythe users, to determine what it was