Serious Runescape Account Security Issues

[KLucius]

All information can be found here

https://www.reddit.com/r/runescape/comments/4icsqr/important_major_account_security_issues/

TL;DR: Change email passwords

Back-up link

http://pastebin.com/Z6chuuEy

 

[jackthehackm8]

that shit is fucking scary.

 

[CoreyBeLurkin]

Threads like these always make me feel scared for my account but most of the time these reddit posts get shut down by JMods because it was a fault on the players end

 

[Soil]

it's just a small database leak, phone companies have leaks like this every day and they can't stop it hackers will soon control the internet, they are becoming too powerful

 

There was a streamer who was set up by members of his stream. They asked him casual questions like "my isp is shit, what isp do you have? im gonna switch" etc and managed to recover his account.

Can't find it, but "a friend" posted it

 

[Dixo]

There was a streamer who was set up by members of his stream. They asked him casual questions like "my isp is shit, what isp do you have? im gonna switch" etc and managed to recover his account.

Can't find it, but "a friend" posted it

I remember hearing about this story, it was something to do with members at a "well known" RS hacking forum from what i recall.

Real shame to the victims of these recovery scams, i guess it should just teach people to never give away too much personal information over the internet. You never know who's gonna be on the receiving end!

 

[Goods4RS]

There was a streamer who was set up by members of his stream. They asked him casual questions like "my isp is shit, what isp do you have? im gonna switch" etc and managed to recover his account.

Can't find it, but "a friend" posted it

Jagex's recovery system is crap anyways. I've recovered my own accounts using practically false information and still recovered them. Silentc0re had a video up about people getting their accounts back whilst trolling in the report box down the bottom of the page and Jagex still accepts it. You can probably find it on his YT channel. It's a pretty interesting video, considering how Jagex boasts on about how EVERY report is handled by an actual Jagex Moderator.

 

[I Buy Pins I]

Its a ton of databases that have been hacked, even sythe is one of them .. I know a person who has all this info and he found all my personal details within few seconds, scary as hell.

 

There was a streamer who was set up by members of his stream. They asked him casual questions like "my isp is shit, what isp do you have? im gonna switch" etc and managed to recover his account.

Can't find it, but "a friend" posted it

I assume this is the story you speak of?

https://www.youtube.com/watch?v=xg_we-J-wgk

 

[jackthehackm8]

I remember hearing about this story, it was something to do with members at a "well known" RS hacking forum from what i recall.

Real shame to the victims of these recovery scams, i guess it should just teach people to never give away too much personal information over the internet. You never know who's gonna be on the receiving end!

is it really?
because im sure any 12 year old kid could do this, all you're doing is re-wording questions based off of jagex recovery system, which also goes to show how shit it is.

 

Jagex really needs to tighten up their recovery process and add a delay on removing authenticator. All the security measures in the world mean absolutely nothing if they can be bypassed in this manner. It's also laughable how the best way to get in contact with the support team is via twitter/reddit..

 

[RSPhreak]

I'd recommend to get a 2FA on your outlook or gmail address as well, it would be a lot harder to work without access to your email.

 

[KLucius]

Seems the post was removed by Reddit staff, here's a back up http://pastebin.com/Z6chuuEy

 

[Burger]

WTF?? how do people get into database , I also heard that people can get like database for rsps and hack account there, I loses partyhat on server called ikov once worth 50m 07

 

[KLucius]

WTF?? how do people get into database , I also heard that people can get like database for rsps and hack account there, I loses partyhat on server called ikov once worth 50m 07

RIP


No clue how they access the DB but I'm assuming it's leaked from OSbuddy/GMail or something.. both are known to have been hacked recently, would be all too easy for somebody to scroll through the leaks and hope they get lucky.

 

[Bobby_RS]

always be weary of your account mate, scary shit.

 

[Hellfury]

damnnnnnnnnn this was an eye-opener