Help! I keep getting hacked..

[Mandingo]

So I run a goldfarm of around 10 accounts, and for some weird reason, 1 account out of 10 would get cleaned out completely with its password changed. The hacker wouldn't change the email or anything, just change the password and then take the items in the account.

I did a virus check and there were no viruses on my computer, and I am currently running the accounts on a VPS. Weird thing is, is that the other accounts remain completely untouched.

This happened two times this month already, on 2 different gmails. I created the gmail account on a web browser on the VPS so it's sort of suspicious. I'm pretty sure the hacker is the same guy, since both times he logged in my gmail through windows in Toronto, Canada.

I ran another virus check and my computer is completely clean, and i changed all the passwords to all my accounts. How am I still getting hacked?

 

[Mandingo]

In addition: I feel like my main would be cleaned too if there was a virus on my computer, along with my other accounts. However no other accounts are touched.

 

[FiveBots]

I would say, Request for a ban (Just in case) swap VPS provider, and change all your accounts with new passwords for each one (don't make them all the same)

 

[Mandingo]

I would say, Request for a ban (Just in case) swap VPS provider, and change all your accounts with new passwords for each one (don't make them all the same)

I have my Sythe account on the two factor authenticator thing, and its a bitch to log in (even with the app) so i think my acc is safe..And the weirdest part is that my other accounts are untouched. If they were all cleaned, i would think its a virus/keylog but the fact that only 1 acc out of 10 being hacked makes me think my vps provider is doing it on the downlow.

I would switch VPS providers but i bought a package for 3 months, so i have a lot invested in it :/ I don't want to switch until i find more evidence that it points towards the vps

 

[FiveBots]

I have my Sythe account on the two factor authenticator thing, and its a bitch to log in (even with the app) so i think my acc is safe..And the weirdest part is that my other accounts are untouched. If they were all cleaned, i would think its a virus/keylog but the fact that only 1 acc out of 10 being hacked makes me think my vps provider is doing it on the downlow.

I would switch VPS providers but i bought a package for 3 months, so i have a lot invested in it :/ I don't want to switch until i find more evidence that it points towards the vps

Should try experiment ( use other accounts on that vps, see if gold is stolen, ect. what vps is this?)

 

[Mandingo]

Should try experiment ( use other accounts on that vps, see if gold is stolen, ect. what vps is this?)

I run 6 accounts on that VPS, and 1 account got hacked. Same thing happened a few weeks ago with different accounts, 6 accounts/1 hacked. However both accounts were the only email accounts I created on the VPS

VPS provider: Portal Home - Start Your SIte

 

[FiveBots]

I run 6 accounts on that VPS, and 1 account got hacked. Same thing happened a few weeks ago with different accounts, 6 accounts/1 hacked. However both accounts were the only email accounts I created on the VPS

VPS provider: Portal Home - Start Your SIte

I wouldn't user that site from now on, ask for a refund, and say it due to in secure connections
with some of your accounts being hacked because of it

 

Enable authenticator on the RS accounts too?

 

[Mandingo]

I wouldn't user that site from now on, ask for a refund, and say it due to in secure connections
with some of your accounts being hacked because of it

They told me that there isn't any malware on the VPS so they can't refund...

Enable authenticator on the RS accounts too?

enabling authenticator on all the RS accounts would be too much of a hassle for farming :/

 

[Floridian]

Enable authenticator on the RS accounts too?

Authenticator doesn't matter if they have your email. You can just disable the authentication via an email.

Best bet: 2FA your email

 

[Moetive]

I think it's the VPS. This is the official twitter of the site: Tweets with replies by Start Your Site (@Startyour_site) | Twitter - Completely unprofessional and chances are owners/workers themselves play Runescape.

 

[Alex_J_Leon]

Your instincts are correct - it is the VPS host that is stealing your money. If they won't refund your money, you can always chargeback. I've always won chargebacks in these types of situations.

Edit: The person deleted their tweets. It seems this scammer uses Sythe.

 

[Xylate]

I wouldn't user that site from now on, ask for a refund, and say it due to in secure connections
with some of your accounts being hacked because of it

That would be going against our terms of service. We don't offer any refunds unless we deem applicable.

I think it's the VPS. This is the official twitter of the site: Tweets with replies by Start Your Site (@Startyour_site) | Twitter - Completely unprofessional and chances are owners/workers themselves play Runescape.

Nice, basing your judgement off a twitter account. Smart thinking there.

Your instincts are correct - it is the VPS host that is stealing your money. If they won't refund your money, you can always chargeback. I've always won chargebacks in these types of situations.

Edit: The person deleted their tweets. It seems this scammer uses Sythe.

We host over 30-40 other bots on our servers from members of OSBot that would have more to lose, which aren't having any issues.




We run scans every two hours on all of our servers including web hosting.
We also don't have have any employees in Toronto(As you stated who hacked you is from Toronto), and our proxy servers are all US based.


Look into two factor authorization. thanks.

 

[Jaiden]

Hello. I am the only member of Start Your Site who resides in Canada. However, i do not reside in toronto, & neither does my ISP. at the moment, i currently live in Newmarket Ontario. I'm not particularly worried about sharing this, because i'm on the verge of moving far away. If the OP would like, i will send him my home IP and hostname. - None of our servers are in Canada either, i can have this verified for you if you would like.

You are correct, we do in fact use sythe. Those tweets you saw were personal tweets mistakenly sent on a company account, by my partner, when they were pointed out here and we noticed it, we deleted them.

He and i both come from an rs/rsps background and are trying to start a legitimate company together.

Long story short, if someone is stealing from your accounts, it's not us.

 

[FiveBots]

Hello. I am the only member of Start Your Site who resides in Canada. However, i do not reside in toronto, & neither does my ISP. at the moment, i currently live in Newmarket Ontario. I'm not particularly worried about sharing this, because i'm on the verge of moving far away. If the OP would like, i will send him my home IP and hostname. - None of our servers are in Canada either, i can have this verified for you if you would like.

You are correct, we do in fact use sythe. Those tweets you saw were personal tweets mistakenly sent on a company account, by my partner, when they were pointed out here and we noticed it, we deleted them.

He and i both come from an rs/rsps background and are trying to start a legitimate company together.

Long story short, if someone is stealing from your accounts, it's not us.

That would be going against our terms of service. We don't offer any refunds unless we deem applicable.



Nice, basing your judgement off a twitter account. Smart thinking there.



We host over 30-40 other bots on our servers from members of OSBot that would have more to lose, which aren't having any issues.




We run scans every two hours on all of our servers including web hosting.
We also don't have have any employees in Toronto(As you stated who hacked you is from Toronto), and our proxy servers are all US based.


Look into two factor authorization. thanks.

"No malware" Heard of thing called "FUD" means that even your scans can't find it...
tell him the server will be wiped with any other users on it as well, for there own protection (reformat the drives).....

original post -
Swap vps, get a refund for the months not used.
This is a pathetic attempt to keep you onto a insecure vps.

How would they know what bot people are running, (os-bot, etc.) been spying.

Sorry about the grammar and spelling i'm in a rush right now.

 

[Xylate]

"No malware" Heard of thing called "FUD" means that even your scans can't find it...
tell him the server will be wiped with any other users on it as well, for there own protection (reformat the drives).....

original post -
Swap vps, get a refund for the months not used.
This is a pathetic attempt to keep you onto a insecure vps.

How would they know what bot people are running, (os-bot, etc.) been spying.

Sorry about the grammar and spelling i'm in a rush right now.

If he wants to reformat it, he can reformat it himself from his control panel

 

[Mandingo]

You have claimed that the hack is not from your site because:
1. You wouldn't risk all you have for something as low as 30m 07
2. Your servers are supposedly secure
3. No motive to scam small amounts when you can scam big in general

I am not accusing you of stealing, but I do in fact think that these hacks are coming from your side.
1. The only 2 gmail accounts I created on your VPS were both hacked. Not the RS account, the gmail account. Through the gmail account they supposedly knew that I used them for runescape and changed the password.
2. If there were to be a scam, scamming small amounts from 1 person would keep you in the clear since no one would ever assume that it was you doing it. No one would ever believe that one guy who accused the VPS provider of hacking 2 of his 15 accounts or so.
3. I don't know where you or your partner are from, but Toronto, Canada has a 3 hour time difference from where I am at (and you also have a 3 hour time difference)
4. If I were to have a keylog or virus, ALL of my accounts would be hacked. That is common sense by any hacker/victim. The fact that only 2 accounts (created on the VPS) were hacked, sort of puts the ball in your court.

If he wants to reformat it, he can reformat it himself from his control panel

 

[FiveBots]

You have claimed that the hack is not from your site because:
1. You wouldn't risk all you have for something as low as 30m 07
2. Your servers are supposedly secure
3. No motive to scam small amounts when you can scam big in general

I am not accusing you of stealing, but I do in fact think that these hacks are coming from your side.
1. The only 2 gmail accounts I created on your VPS were both hacked. Not the RS account, the gmail account. Through the gmail account they supposedly knew that I used them for runescape and changed the password.
2. If there were to be a scam, scamming small amounts from 1 person would keep you in the clear since no one would ever assume that it was you doing it. No one would ever believe that one guy who accused the VPS provider of hacking 2 of his 15 accounts or so.
3. I don't know where you or your partner are from, but Toronto, Canada has a 3 hour time difference from where I am at (and you also have a 3 hour time difference)
4. If I were to have a keylog or virus, ALL of my accounts would be hacked. That is common sense by any hacker/victim. The fact that only 2 accounts (created on the VPS) were hacked, sort of puts the ball in your court.

Sorry about him scamming you. I would report this, with as much proof as possible he deleted all his tweets. sad.

 

[Jaiden]

You have claimed that the hack is not from your site because:
1. You wouldn't risk all you have for something as low as 30m 07
2. Your servers are supposedly secure
3. No motive to scam small amounts when you can scam big in general

I am not accusing you of stealing, but I do in fact think that these hacks are coming from your side.
1. The only 2 gmail accounts I created on your VPS were both hacked. Not the RS account, the gmail account. Through the gmail account they supposedly knew that I used them for runescape and changed the password.
2. If there were to be a scam, scamming small amounts from 1 person would keep you in the clear since no one would ever assume that it was you doing it. No one would ever believe that one guy who accused the VPS provider of hacking 2 of his 15 accounts or so.
3. I don't know where you or your partner are from, but Toronto, Canada has a 3 hour time difference from where I am at (and you also have a 3 hour time difference)
4. If I were to have a keylog or virus, ALL of my accounts would be hacked. That is common sense by any hacker/victim. The fact that only 2 accounts (created on the VPS) were hacked, sort of puts the ball in your court.

What would you like us to do? we have manually scanned the VPS as well as the node you are on. we have detected nothing. If you would like to, you are free to re-install your OS, which would kill any viruses it contains. Furthermore, the only times we ever directly access a client's VPS is when we are requested to. we have sold numerous other VPS to plenty of other people. Lots of those people are bottling, and nobody else has made any such complaints. this here is my partner on OSBot, where we have made most of our sales inside of the Runescape niche

You can see he has quite a good standing there, each of those 77 positive reputation represent a transaction.

So, either we're only stealing from you, or you're the only person who has noticed..

Or we're not stealing from anyone and it's something else.

I don't know how else we can prove to you that we aren't the perpetrators. have you checked your access logs?

 

[Bobby_RS]

If you have access to your accounts recovery status you should go to the homepage and go to stolen account or something of the matter, it locks It in place so you have time to recover without anything being stolen.