Hacked..how?

So i just logged in to see my osrs account has been hacked. this is an account i brought a few weeks ago off a trusted seller on PA.

Ive secured the account, email and changed password.

NOBODY knew the account username apart from me and any creators...

but my password hasnt been changed so they found my password. ive ran virus scans and found nothing?

How could they of got my password? how can i secure it so this doesnt happen again

 

Maybe the PA seller hacked it back? Or if they were comprimised they'd have the information to take all of the sellers accounts

 

Maybe you got phished? Got any e-mails or went throw with any giveaway/double xp streams lately?

 

But he cant of because my password wasnt changed

 

Id like to think im not that stupid haha, im genuinely baffled.

 

Not all virus scanners find rats and other malicious stuff like that, I'd recommend factory cleaning your PC before changing any of your passwords or logging into anything email related.

 

People run account crackers all the time... That is probably the easiest explanation...

 

Yep,

I'd take it to PA they usually have buyer insurance right?

 

The account wasnt taken back, somone managed to get my new password. they didnt change it or recover account, just logged in and took everything

 

I guess if i had a bank pin everything would of been safe?

 

Oh, I must have missed that part... Yeah sounds like phish or crack tbh

 

Happened to my cousin a few weeks ago too. He definitely wasnt phished or ratted. Something weird is going down. Do you use runelite?

 

I imagine somebody intercepted the login name of the account whether it be with access to your email or access to your PA account. If you used the same password for your email/rs account or PA/rs account then you have your answer. Change your passwords and 2FA on email. Don't re-use passwords. If none of the above applies then you're more than likely ratted or got phished, wipe yo shit.

 

Someone was on my facebook 2 hours ago, from Taiwan on windows 7 chrome.

Its crackers dude, nobody would have been able to guess my password. & there have been an insane amount of hacks on OSRS in the last month or so.

Edit:I could also be ratted

 

RS cannot be bruteforced so no, it isn't crackers. Your info is more than likely in a data leak somewhere and somebody has targeted you specifically.

Have I Been Pwned: Check if your email has been compromised in a data breach - Search your email address in there and you may find your problem.

 

This is completely false, any password anywhere can be cracked in theory

 

Define cracked.

Decrypting passwords from data leaks? Bruteforcing by trying millions of passwords in the hope of one being successful?

Bruteforcing does not work for RuneScape, Outlook, Gmail and most popular email providers. This is one of three things: rat, phish or password leaked.

 

it's important to understand that no amount of digital data is safe, Runescape cannot be bruteforced in the traditional sense for obvious reasons. however, a hacker (programmer) writer, etc, may have special permissions to run bruteforce programs on systems lifted off of the original program. Meaning someone is separating the information from the actual website itself and running a program off of the information instead of the server. it happens, and not all data breaches are spotted, meaning someone may have access to runescape accounts or access to data related to runescape that has not been spotted yet.

 

Not happened lol. If this magical bruteforce program was initiated by this master programmer that would be millions of incorrect logins. These logins would be noticed and this "bruteforcer" would be patched. Multi billion £ companies do not let some delinquent script kiddy into the website bruteforcing accounts and it go unnoticed. If this were the case there'd be a lot more than this 1 kid claiming he got hacked, falador massacre would return once again.

Of course digital data isn't safe, but he did not get cracked that's the more pertinent point to understand.

"and not all data breaches are spotted, meaning someone may have access to runescape accounts or access to data related to runescape that has not been spotted yet."

Again, extremely unlikely, this would not go unnoticed. Jagex would see accounts were getting logged into with either thousands of invalid login attempts or getting into the account using the "data breach". Jagex would be duly alarmed. Yes companies get hacked, i.e the Uber breach. Hackers infiltrated the platform, stole data, paid by Uber to delete the data and told to keep schtum. Companies rarely miss when their data is stolen. The hacking paradigm is almost always caught as it would be at Jagex. This is not a case of bruteforcing. Whoever got this guy either ratted him, phished, targetted him and found passwords in a data breach and hit the jackpot. This guy wants to stay ultimately safe? Random gen passwords, password manager, 2FA on every single account, never buy accounts, don't download programs that brings doubt on legitimacy, always check the url and don't share passwords. With the above being followed you can pretty much guarantee your safe and wont have to post another threat like this again. Be safe brother

 

You're not understanding what I'm saying at all.