• Log in or sign up for an account here: https://www.sythe.org/login

Reward ($50) explaining how I got hacked?

N

newherenow

Member
Joined
Jan 8, 2016
Sythe Gold
41
Messages
63
Not sure if this is the correct place to post this, but sorry if it's not.

Giving a reward of $50 in ETH (ethereum) to anyone who can explain how I got my runescape account hacked?

Must have ETH Wallet to receive $50 in ETH.

pm me for RSN.

- Malwarebyte runs every 12 hours (twice/day)
- Antivirus runs every 12 hours (twice/day)
- Account made a few years ago, but just started playing more.
- Account made by me & I use the email frequently
- Hacker didn't use "forget password" or access my email to steal my account...he knew my password.
- None of my friends know my RSN email
- Email requires special USB to access
- Checked email previous IP and hacker's not there
- Also all emails from that account (a copy is forwarded to another email I have)
- only used runescape official client + osbuddy


Weakness:
-Same password for 3 years
-No authentication (authenticator)


My friend's theory is that there was a possible data leak or something? can anybody confirm that? maybe you would find my old RS password if I give you my RSN?

Auto-win- if you can find my old password online
Can win by finding possible leak sources or a good explanation


I don't care that I got hacked, but want to know how.






lagucci FOUND IT!!!!!
lagucci is the winner.
this is now closed!






 
Last edited:
Why on earth would you not put an authenticator on your account? It always blows my mind how people fail to do this. Especially when you bent over backwards to protect your email account, which is good security. Sounds like your Runescape security was way too lax.

Your password ever used anywhere else? Or a similar pw on other platforms? You were probably part of a DB leak with account details similar to your account credentials. I mean keeping the same password for 3 yrs and not having an authenticator is just poor security management, especially when you take the time to do regular scans.

It doesn't matter how secure your email is if all thats protecting your ruenscape account is a simple password. Plenty of ways someone could get just your password.
 
Last edited:
Extreme Homosex
Go to www.haveibeenpwned.com and see if any of your information has been leaked via that site. If your passwords have been the same for a long period of time it is possible that if someone knew that you played rs that they were able to pull your information just from there alone. If your info wasn't leaked I don't really have an answer.

The site that I linked is a site that looks thru a good amount of databases that have been breached in the past and tell you if your information was exposed from affiliation with a leaked database.
 
Last edited:
Grendmas RS said:
Go to www.haveibeenpwned.com and see if any of your information has been leaked via that site. If your passwords have been the same for a long period of time it is possible that if someone knew that you played rs that they were able to pull your information just from there alone. If your info wasn't leaked I don't really have an answer.

The site that I linked is a site that looks thru a good amount of databases that have been breached in the past and tell you if your information was exposed from affiliation with a leaked database.
Click to expand...

Good news — no pwnage found!

 
I Bleed Duke Blue said:
Why on earth would you not put an authenticator on your account? It always blows my mind how people fail to do this. Especially when you bent over backwards to protect your email account, which is good security. Sounds like your Runescape security was way too lax.

Your password ever used anywhere else? Or a similar pw on other platforms? You were probably part of a DB leak with account details similar to your account credentials. I mean keeping the same password for 3 yrs and not having an authenticator is just poor security management, especially when you take the time to do regular scans.

It doesn't matter how secure your email is if all thats protecting your ruenscape account is a simple password. Plenty of ways someone could get just your password.
Click to expand...


I know, but I want to know from which database did the leak come from. Paying $50 for this.
 
newherenow said:
I know, but I want to know from which database did the leak come from. Paying $50 for this.
Click to expand...

Gl man, hope you figure it out. Those types of things drive me crazy as well. When you don't know why it happened it's all the more irritating. Hope you figure it out.
 
I Bleed Duke Blue said:
Gl man, hope you figure it out. Those types of things drive me crazy as well. When you don't know why it happened it's all the more irritating. Hope you figure it out.
Click to expand...

I hope so as well I had to change every password for everything and scan my pc with 5 different antiviruses.
 
newherenow said:
I hope so as well I had to change every password for everything and scan my pc with 5 different antiviruses.
Click to expand...

Your security for the most part was strong, so I'm really inclined to say it was definitely a database leak. Are there any websites you know for sure you had the same/similar pw?
 
I Bleed Duke Blue said:
Your security for the most part was strong, so I'm really inclined to say it was definitely a database leak. Are there any websites you know for sure you had the same/similar pw?
Click to expand...

probably all :)

I can provide you my email and you can try to find out which database leak and what my password was. If the password turns out to be the previous one, then you get $50. Pm me to get email or RSN or both.
 
Sythe's 10th Anniversary
Gohan has AIDS
Pokémon Trainer
newherenow said:
Weakness:
-Same password for 3 years
-No authentication (authenticator)
Click to expand...
I hope you find the solution to your problem. Although, it may be a long shot on that one, I do recommend changing your passwords every 90-180 days and putting an Authenticator on your account.
 
Have you visited any fake phishing site? You must've without your consent. There is no other way... or you downloaded an undetectable virus.
 
Quaggan said:
Out of curiosity, how did newherenow get hacked? Was it a database leaked? If so, what database got leaked.
Click to expand...

He was leaked from a site probemas.com,
 
Run ComboFix and send me the report and I will be able to tell you exactly what happen ;)
 
Viral_ said:
Run ComboFix and send me the report and I will be able to tell you exactly what happen ;)
Click to expand...
I allready fixed it for him ;D
 
You must log in or register to reply here.
Runescape Gamblingrunescape gambling
Back
Top