Community
Runescape
LoL & WoW
Xbox & Steam
User Center
sl0ta
Guru
- Joined
- Jan 13, 2008
- Sythe Gold
- 0
- Messages
- 1,784
Hello,
I was victim of very clever scam method. Maybe it has been out for longer ,but I heard about it first time when I was also vicitim yesterday.
So what is this scam method?
I was looking for some membership game cards in upgrade section. I contacted one seller. He showed some method where I just copy URL and he does not even need password from me to apply membership. So I did this URL and stayed loged in on my account . Then he found out that his membership cards are not working . So we decided to end trade. I change password on my account just to be sure. On next day I logon account and found myself totally cleaned. I was very disappointed . I was thinking about how is it possible. I came with conclusion that it have to be keylogger,so I scanned my PC with AV, but nothing has been found . So I asked my friend who is working in AV developing company to look into my RSIT and COMBOFIX logs ,but he did not find nothing. We also managed to set firewall that logs all connection in my router in house. However we did not find any suspicious activity. So I changed my password again on another computer. Next day I logged in and find myself cleaned again. Very interesting thing was that scammer has never changed password ,so he could not do this by e-mail or recorvery . I was thinking again about keylogger, but I was also suprised ,that he cleaned only this one account and not any other that I logged in with them and they had much more whealth. I decided to change all my account setting - recorverys ,password etc.. outside in my friend house. Once I was going to check Facebook associations , I found out where the problem is. He associated his facebook account with my runescape and he could easily hack me,even if I changed password.
So I think there should be warning somewhere ,which will inform buyers to check their Facebook associations on their Runescape account after every upgrade ,that someone else applied on their account ,or even if he did not applied and they give him password or url.
Any supporters?
I was victim of very clever scam method. Maybe it has been out for longer ,but I heard about it first time when I was also vicitim yesterday.
So what is this scam method?
I was looking for some membership game cards in upgrade section. I contacted one seller. He showed some method where I just copy URL and he does not even need password from me to apply membership. So I did this URL and stayed loged in on my account . Then he found out that his membership cards are not working . So we decided to end trade. I change password on my account just to be sure. On next day I logon account and found myself totally cleaned. I was very disappointed . I was thinking about how is it possible. I came with conclusion that it have to be keylogger,so I scanned my PC with AV, but nothing has been found . So I asked my friend who is working in AV developing company to look into my RSIT and COMBOFIX logs ,but he did not find nothing. We also managed to set firewall that logs all connection in my router in house. However we did not find any suspicious activity. So I changed my password again on another computer. Next day I logged in and find myself cleaned again. Very interesting thing was that scammer has never changed password ,so he could not do this by e-mail or recorvery . I was thinking again about keylogger, but I was also suprised ,that he cleaned only this one account and not any other that I logged in with them and they had much more whealth. I decided to change all my account setting - recorverys ,password etc.. outside in my friend house. Once I was going to check Facebook associations , I found out where the problem is. He associated his facebook account with my runescape and he could easily hack me,even if I changed password.
So I think there should be warning somewhere ,which will inform buyers to check their Facebook associations on their Runescape account after every upgrade ,that someone else applied on their account ,or even if he did not applied and they give him password or url.
Any supporters?
![[S]eki](/data/avatars/m/328/328357.jpg?1332730028){kind=avatar}
I tried to explain it pretty well. It was because he associated his facebook to my runescape account ,since I do not use facebook and I have never had associated it with my runescape account ,so I did not notice it. So he could easily login wiht facebook and he did not even need my password. Therefore its pretty dangerous. There have to be warning about it. If you give your account to anyone for any reason, you have to check facebook association after it.
