Computer Saftey Precautions

Alot of pictures​

Alrite, over the last few weeks.. well pretty much since the release of "free trade" there has defiantly been more complaints of others getting either phished or keylogged or RAT'd.

Im going to go thro a few popular techniques in which the hackers will try on you. Ill be covering Fake sites (phishing), Remote Access Tools (RATs) and Java drive bys as they are the most common things i have seen an they are also quite effective.

Phishing / Fake websites:

Everyone has seen those noobs spamming at GE or the void boat, seemingly adding you to "recruit for there clan" or similar. They will link to you sites that are sometimes quite close to the legit runescape forums or real site and when you go on there they will be pressuring you to log on an post an application. 3 years ago this worked well, now most people know not to go onto these sites but im still seeing others try. Lately the newer version of it has come to my attention an im seeing quite real emails coming in pretty much every day. These look quite legit an even forward onto [email protected], which also furthers there legit look. Some of these sites i have clicked on an tested they come with a phishing/java drive by combo which for people who dont know what to look for seems quite normal. Also if people add you for no reason while your walking around GE in your santa, just simply ignore them, most are out to scam you anyways and if you want to make new friends join a clan or something.

How they get your password... well i didnt think i would have to explain it but once you log onto their fake login page, it doesnt send your password to jagex to log you in lol, it sends your details to theier FTP, this includes emails attached to your runescape account an some your IP so they can DDoS you off once they got your password an changed it.
Your basic phishing site:


Email from the phishers:


Link at the address bar after i clicked the link, clearly a change from the link in the above email:


Picture of a java drive by:


Java Drive Bys /RATS / Keyloggers
Now a java drive by is a quick little pop up that ask permission to install something onto your computer, these are harmless if you click cancel, but if on the other hand you click yes or accept or whatever then your computer is most likely infected with a RAT or at the very least a keylogger.

RATs and keyloggers, well RATs are far worse then keyloggers coz they can actually control your computer, they can check throught your files and also mess around with you, they can open your CD drive, shut down you computer and if they want even look at you thro your own webcam. RATs typically come with keyloggers so its just a more advanced version.

To prevent getting analed by key loggers i suggest you go to download.com an get yourself a "keyscrambler" also use a master password on mozilla and all they should be able to access is unfortunatly you runescape account (as keyscrambler doesnt work on java..) and you MSN if you have Auto log in.

Im unsure if im allowed to advertise stuff like this, but you could just type key scrambler into google. But for all the lazy people out there http://www.qfxsoftware.com/, works great for me, even the free trial. Trust me its legit i have been using it for over 6 months and nothing has happened to me.

Pretty much going to wrap it up.. I know most of this is common sense to most but like seriously every time i log onto sythe i can see atleast 3 or 4 topics titled "hacked" or "dont trade my msn" or similar and it kills me, you just need to be more aware and more on your toes an most of all IF IT SOUNDS OR LOOKS TO GOOD TO BE TRUE ITS A SCAM

I hope this helps even if it does help only one person, still worth typing it out

INB4TL.DR​

 

hey thanks for this giude, last night i clicked a link.. no java pop up came up but a cmd window quickly flashed up and then off again.. i did a full system scan and nothing came up.. apart from tracking cookies and a .rar file which i deleted.. when i check the processes on my task manage there is nothing suspicious.. but today i have been hacked on all three of my accounts which i have logged into in the last 24 hours.. earlier i noticed my mouse moving a bit.. assumed it was a glitch on one of my bots even though i wasn't on that window.. but i guess i have a RAT or a keylogger.. can you help me?

 

Reformat.

 

Thanks for a great guide. Very helpful. It could be even sticked Imho.

 

Yeah unfortunatly reformatting is the only 100% way to know you are no longer infected..

You got to remember these files are tiny tiny files and can blend what processor it is depending on the default ones you currently use.

EDIT: just noticed that all my pictures were removed, I was only trying to show other the examples of the link changes in the email an after you click it and also what the java drive by looks like ?

 

Great guide, especially since many people are trying to phish nowadays.

 

Learn to crop my friend, and it would be easier to read if it was more organized/better grammar. Secondly, there's already many of these threads posted, in the end, it can be summed up in two words: common sense.

 

Thanks for posting this, hopefully with prevent more people from falling for these.

 

Good guide. Helped me

 

yeah I got an email from [email protected] telling me I was banned and to click the link too see my status

Typed user and then allmost pass then thought better and went onto rs site and ofc no bans

 

You'd be amazed at what you can achieve by using common sense. Don't do shit. That's all there is to it.

 

Damn, Thanks for the heads up.

 

I've seen the fake forums one loads of times. I steer clear of just about ever runescape related email not from an official Jagex address.

 

Thanks for the warning. Recently picked up rs again and it's good to know about the new ways I can get screwed over in that game.

 

Can you guys stop posting all of this junk? You don't have to reformat for every single problem. If you know anything about these you can easily stop them.

 

Another great program to use is Malwarebytes. HijackThis if you know how to read the logs or know someone who does (I'm willing to assist with computer cleanup, for a fee), and Spyware S&D are just a few free programs out there that are pretty useful.

 

HijackThis is definitely one of the BEST programs IF you can read the logs (or just get anyone that knows how to).

Trend Micro also has a few other useful tools.

 

You can also use Blink Endpoint and I doubt you will get infected.

 

sorry for the bump, but sandbox is also a great program if opening suspicious programs, its allows it access thro a protect part of your harddrive and wont allow it to mix with other programs or go anywhere else..

sorry about the grammar in the original post i didnt know the grammar nazi's were taking over sythe

I also didnt crop it because i was trying to get across the point of how "legit" these emails and sites are.. FML you think i dont know how to crop LOL ?

And for all the common sense haters out there here if you read to the end before posting i stated the following

Thanks to the rest of you that actually posted something worth reading.

 

my boyfriend mad me do this.