SRL Archive - RuneScape News and General

Yes, that's right, my 13 character password was hacked… Like wtf, no viruses, nothing. Lost whip obby cape dboots and warrior ring. Fuck. Back to dscim and boots of fucking lightness. /Rage over

Dang.. When i got hacked i lost more then i quit.

EDIT** 13 char hacked?? wow..

Yea, but how the fuck do you crack a 13 character pass?

I havn't been on in like 2 days, I don't tell ANYONE my pass, and it was like aweraw34tra or some shit so yeah… Anyways, I'm just pissed, dont mind me guys.

Its easy to *blank* runescape accounts.

If you use certain programs it takes only about 20 minutes at the max.

And i do NOT do this, if i wanted to do this then i would be rich most likely, but i like to play the game fair. And macro =)

And i put blank because i dont want this spread out everywhere so i wind up getting hacked..

But i know how it feels dude, i got a white p-hat, and then i get perm banned, this was back when they were around 700k, but still now it pisses me off because i could have been so rich..

maybe you had a virus or someone saw you type it?

From: dan19927
maybe you had a virus or someone saw you type it?

Dude, I type faster then anyone can see, and if you fucking read, you'd see, NO FUCKING VIRUSES.

Hah, you can't crack that password. This had to be a program you were using that had a keylogger attached.

From: apolloiiix
Hah, you can't crack that password. This had to be a program you were using that had a keylogger attached. End of story.

And you must be a fucking retarded hermaphrodite. I do NOT use any programs retard. Go fucking learn to read kk? Scar is only one I use.

I am sorry, it was me!

Jk :( I wish it was me tho :rolleyes: (So I could return items ;) )

Good luck macroing it all back ^_^

From: Hey321
And you must be a fucking retarded hermaphrodite. I do NOT use any programs retard. Go fucking learn to read kk? Scar is only one I use.

Well, there is no way that it was brute forced. A few ideas…

- Do you use public computers like at libraries to play on your account, or maybe a clever friend's computer? If so maybe it had keylogger software or hardware.
- Have you ever used your RuneScape username/password to sign up on private websites/forums related to RuneScape? If so the admin may have put 2+2 together.
- A third party SCAR script or something in SCAR/SRL itself uploaded your username/password variables to a server, much like SRL stats works I fathom.

From: Hey321
And you must be a fucking retarded hermaphrodite. I do NOT use any programs retard. Go fucking learn to read kk? Scar is only one I use.

There's no other way it could have happened. And don't treat other members like that, especially when you're wrong and they are trying to help. Cause there's no chance in hell that you were cracked, or bruteforced, with a password like that. 1 month infraction issued, speak like that again and I'll add another.

So you checked recovery questions etc. to make sure you didn't just forget your password? Or you typed it in incorrectly?

Hmm…well, if "aweraw34tra" was your password, despite the fact it is about 13 characters long, that would "kind of" be easy to brute force. You only have about 2 numbers, and the rest letters. Then again, it looks like a random gibberish password, so that would make it even harder…

But if it was just a case of, you forgot what it was, or you kept on typing it in incorrectly, then that random gibberish would have helped that… :p



Wait…forget everything I just said…you can't have forgotten it, you said that you know what you lost, so you were able to get on?…Fuck…there goes my theory… :p

In that case…sorry about your account dude…report it to Jagex? :p

From: apolloiiix
Well, there is no way that it was brute forced. Let me ask you a couple of questions.

- Do you use public computers like at libraries to play on your account, or maybe a clever friend's computer? If so maybe it had keylogger software or hardware.
- Have you ever used your RuneScape username/password to sign up on private websites/forums related to RuneScape? If so the admin may have put 2+2 together.

Last idea:
- A third party SCAR script or something in SCAR/SRL itself uploaded your username/password variables to a server, much like SRL stats works I fathom.

No, No, and Lol. I use Tara's script with a small edit by me, and it isnt even on the account I was hacked on. I have not autoed on him for like two months.

So then I'm guessing you think someone cracked your password using a program? It would probably take millions of login attempts over days with thousands of proxies by a program to crack your password and I gotta think Jagex implemented some sort of security measure like if login attempts is over 1 million for said account in 24 hours then…

Why not just "hack" one of the best accounts on RuneScape and not yours then?

Well, he must have, no other way I can see… Oh wait, that's right, I tested a script for SpAz yesterday, and it logs you in and does a pin.. Hmm… Maybe that's why my gems are fucked around with eh SpAz? I believe I know who it is, bedtime though =[.

Who do you think it is then?

Yes Interested, I, me.

Spam Much Robot? :p

From: c0de
Brute force it, or get it out of victim.

they must have done that for a while then. :D

Why? It wouldn't take that long to Brute Force.

dang. And i thought it was bad getting taken for my main with a pass like eggroll. lmao. Well, I guess I'll have to make a new one. However, that is what got me hooked on scar. What boggles my mind is how they got through my bank pin. I'm the only one that knew mine.

Slackjaw7

Perhaps you got a keylogger from a website. There are a lot of sites out there that download things into your computer without you even knowing…

Oh also, I use Keyscrambler. <3 firefox =].

Keyscrambler…I tried that for about 20 mins…it pissed me off alot…

From: Lacky
Keyscrambler…I tried that for about 20 mins…it pissed me off alot…

Same here :D

Meh.. Too bad you got hacked.. But I cant think of any other way than what people have already stated that someone could get your pass.. Except guessing :p but that'd take a hell of a lot luck :)

Yea some sites do download keyloggers on to your comp….I am sure of that. Maybe that whats happened to you? IE has a good decent blocker for those causes but FireFox doesnt have a good one. But hey each browser has its good/bad side.

Oh well, already got 1m back so yeah, I'm making cash slowly.

From: kingarabian
Yea some sites do download keyloggers on to your comp….I am sure of that. Maybe that whats happened to you? IE has a good decent blocker for those causes but FireFox doesnt have a good one. But hey each browser has its good/bad side.

IE is just a epic failure. Use firefox :D

From: GoF
Same here :D

Meh.. Too bad you got hacked.. But I cant think of any other way than what people have already stated that someone could get your pass.. Except guessing :p but that'd take a hell of a lot luck :)

Could've guessed? Remember it only had two numbers.

From: kingarabian
Yea some sites do download keyloggers on to your comp….I am sure of that. Maybe that whats happened to you? IE has a good decent blocker for those causes but FireFox doesnt have a good one. But hey each browser has its good/bad side.

You dissing firefox? I'll kill you. :p J/K

From: Hey321
Oh well, already got 1m back so yeah, I'm making cash slowly.

Nice… :D

From: GoF
IE is just a epic failure. Use firefox :D

FireFox FTW!

From: Hey321
for like two months.

It doesn't matter how long it's been. Probably about 8 years ago, I entered my runescape username and password onto a website claiming to have runescape cracks and stuff (I was an idiot when it came to security), and someone had just changed my password about 4 weeks ago. Luckily I got password recovery to work before there was too much damage, although someone had taken all my money and runes and put it in my inventory, so I think it was just before the person was about to trade stuff to another character.

Another suggestion for avoiding keyloggers is to make a virtual machine via VMWare. Install XP (or your OS of choice) and set the hard drive to nonpersistent. That way, every time you restart your virtual machine, all changes made to the hard drive will be destroyed.

=/ Tough luck.

But someone who knows Java or something enough and has a proxy, I think it would be possible that he/she'd make a program that tries one letter at a time, every possibility, and the program would somehow send the info there oh wait a second, am I talking of packet editing? Btw that wouldnt be impossible would it?

EDIT: Devs can give infractions?! O.o

EDIT EDIT: Now I know! Busted! Claw is an und4rrc0v4rrr mod :p

I don't think that you can use brute force on runescapes servers, I mean you have what, like 5 tries and then it locks up. I think it would be a safe bet to call this one a keylogger.

I agree with you. Also, packet editing is unlikely because runescape uses SSL.

From: Hey321
Well, he must have, no other way I can see… Oh wait, that's right, I tested a script for SpAz yesterday, and it logs you in and does a pin.. Hmm… Maybe that's why my gems are fucked around with eh SpAz? I believe I know who it is, bedtime though =[.

Sounds like that script sent the username, pass and pin to a server when you used it.
That what happened?

sorry to say but i really don't see any other way besides the fact that you got a virus. I mean just cause you don't *think* you have one doesn't mean it's true. It's not that hard to get past virus protection :P

From: jesus45
sorry to say but i really don't see any other way besides the fact that you got a virus. I mean just cause you don't *think* you have one doesn't mean it's true. It's not that hard to get past virus protection :P

Viruses wont steal your runescape password.

wait, so did you ever figure out who hacked it?
you said you had a hunch, but you never posted a followup.
I have an idea, do you use the same passwords for anything non-rs related?
if so, someone could go into your saved passwords on ff and look at them.

Just an idea.

My password is weird, it's pronounceable and sounds like it could be in English, yet it isn't a word or combination of words from a dictionary.

^Why would you want to give any hints about your password? We don't need another "I've been hacked" thread.

well, I'm completely certain that nobody will find out my password. I'm just saying that you don't need the most complicated password in the world for a secure one.