Is my account secure? Help please

[TheBrokenOne]

So first off im not sure if this should be posted here or in the general forum, but I figured more of you would know how to fix my problem here.

So to start it off I came off a playing hiatus a week or so ago. I bought 60m and bought a bunch of gear. Im running out of the GE and a guy comes up to me and asks to join his clan for 10m, I agreed to it. Then he asks me to add him and his clan buddies on skype, I agreed to that. They then asked me questions about my account like my levels and such to see how well I would fit into the clan (never downloaded a virus). They asked how much gold I had. I responded 60m and then they asked me to transfer world so they can give me the 10m so I hit exit to lobby. From there I get logged out to the main screen and am able to log on a couple minutes later, only to find theres nothing of value in my account. Anyway Im not here to cry and ask for donations.

The thing I want to know is if my account is secure, this is my one and only account so it would be a bummer to lose. I'm not too concerned about the money. Im more concerned about buying more gold then getting hacked by the same exact people. Since I'm returning from a rs break I hadn't heard of the skype scam before, so I fell right for it. Just wondering if I change my password will my account be secure? If not what do I need to do, such as changing my IP and such. Thanks for listening I really appreciate it. I'm just so lost now and don't know what to do about it.

 

[Sanctuary]

Could you elaborate on the "Skype scam" a little bit please?

I'm not too sure what that is, but as long as you stay away from those particular individuals you shouldn't have a problem. Simply don't repeat whatever it was you did. Again, I'd be able to answer this better if I fully understood it.

 

[Sprawl]

That sounds really odd, I couldn't imagine how that would happen unless they sent you something. =|

 

[TheBrokenOne]

Basically they asked me to add them on skype. So I did, we were all in a voice chat together. I never received a file/virus/keylogger to download, then they asked me to hop worlds, and as soon as I hit exit to lobby it took me to the login screen. I was unable to log in for 5ish minutes because it said I was still logged in from my last session. As soon as I logged in everything was gone. The thing i'm wondering is if my accounts safe and cannot be hacked by these same guys again. Even after a password change and such.

 

[kmjt]

We need more info. Do you have recovery questions, account creation details, membership details etc.? If so you shouldn't have anything to worry about.

 

[TheBrokenOne]

Yes I still have control of the account, they didnt change the password or anything I have questions, and a registered E-Mail I just want to know if they are able to get on my account again and wipe it of all my wealth.

 

[Looney429]

Well, technically speaking no account is safe on Rs. My friend(believe this OR not), hacked a few accounts right in front of me. He made 150m in 15 minutes. I asked him to show me how to "hack" the accounts, but he said no. He then later sent me a .txt file, with a bunch of usernames and passwords. Being curious, I logged into the accounts, and there were accounts with tons of money in there. (The accounts were last logged in anywhere between 120+ days, to day a before.)

He also told me, thats it easier to randomly generate a "list" of accounts, then to specifically choose a account.

AGAIN, I believe him, cause hes done this in front of me. (All he needed was the username).

So, is your account safe? No. But you can try to protect yourself with recoveries, strong/long password, and a bank pin. Having a good firewall is also a plus.

 

[TheBrokenOne]

Alright thanks Ill get a bank pin set up as well

 

[Looney429]

Alright thanks Ill get a bank pin set up as well

MAKE SURE IT HAS 7 DAY RECOVERY! That way if your account is ever hacked again, itll take 7 days to "delete the bank pin". Seven days is plenty of time to check on your account. A good idea for bank pin, is your last four numbers of cell/home phone, DOB, or SSN. If too many people know those, then pick a random number.

 

[99lighting]

I can't even imagine a way for someone to log into your account through skype. Your connected to the skype servers and not their computers. Are you sure you didn't take a link of any sort/ no downloads? If they didn't change your password I would imagine your account secure.

 

[shawnwill1210]

cant be cause of skype but it has to be from the people you were talking to. either that or an extreme coincedence

 

[Sillymonkey]

I can't even imagine a way for someone to log into your account through skype. Your connected to the skype servers and not their computers. Are you sure you didn't take a link of any sort/ no downloads?

This.

You may have either left out the detail of you accidentally clicking something or what not because you don't want to look stupid (if that is the case, why even ask for help?), or you genuinely don't remember clicking/going to something and it compromised your computer.

Either way, I see no possible way that you just going on Skype and talking about your accounts levels, etc. would give them access to your RS account.

The most likely scenario I see is this:

They get you to go on Skype, they get you to click something (even inadvertantly), then talk to you long enough for chat logs to start sending back to them (if a keylogger, etc. they put on your comp sends a message every X number of characters) and then get you to get off RS and go back on (I'm assuming they forced your account out by failing your password X number of times, so you didn't go to lobby you went to login). Then, when you put in your login information, it was sent to them via the keylogger or w/e you accidentally downloaded.

Tl;dr
Clean your computer. If you have a CLEAN image of your computer backed up somewhere, it will only take about 5 minutes to wipe your harddrive and install everything again.

 

[Freddy Krueger]

Hey TheBrokenOne,
Was the clan name called the Dark Disciples by any chance? They tried the same thing on me, they gave you a link to a phisher website. I spotted the biz.nf at the end. Be careful. It's really sad that the clan leader was a player moderator. Proves you can't trust anybody.

 

[Kabal]

Hey TheBrokenOne,
Was the clan name called the Dark Disciples by any chance? They tried the same thing on me, they gave you a link to a phisher website. I spotted the biz.nf at the end. Be careful. It's really sad that the clan leader was a player moderator. Proves you can't trust anybody.

Maybe they scammed/hacked the pmod and was using his account to bait more people in? ;-)

Only thing someone can do to you from skype is get your IP then ddos you. Apparently there are some people that can do more with an IP address (along the lines of hacking), but I don't think the time frame you mentioned would be long enough for them to exploit you like that.

 

[Tckr]

I have had this happen to me, its why most of the time I keep my public off.

 

[PANiC*]

being on voice chat may have given him some access to your pc. just a guess though.

I reccomend fully scanning your pc and changing your password.

 

[Joana]

My guess is that they keylogged/phished you before and they asked you to add them on Skype so they could convince you to change worlds in order for them to clean your account. So clean your computer, change the passwords and you should be fine.

 

[Grrr]

Yeah, sounds to me like you have been phished somewhere along the ling to be honest. You sure no one had linked you to a page which looked like Runescape?

I find it very hard to believe that someone hacked you via Skype.

 

[isell good accounts]

I myself have experience with such scams, I do not abuse it, but i am aware of it.
Firstly reading your story I thought the requested information was used to make a account recovery, which is a joke as I can basically recover any account, active or non active, with bare minimum information. When on Skype with anyone, it is possible for them to get your IP, thus i recommend you change your IP whether this was the cause or not (instructions to do so can easily be found through a google search)
Yet, the mysterious part is that your password was never changed, they knew your original password and therefore they gained access to your account information by other means, most likely of which are either a keylogger or a phising site (anyone can make one now a days).
I highly doubt your account security is at risk as long as you don't visit any phising sites.
Another possibility is that this was a cause from a malicious precompiled script, although unlikely depending on the client you use if you bot, it is still possible.
I recommend you change your password often, and don't worry about getting hacked again as long as you stay away from anything suspicious, if it looks like a scam, it most likely is.

 

[WhitePassion]

scan ur pc with malwarebytes and recover + reset ur recoveries