SRL Archive - News and General

Dear users,

It has recently come to our attention a malicious user, xnoob, stole passwords by distributing a malicious Nature Runecrafter.
Not only was this crafter heavily plagiarized from Flight's (members only) one, the so-called "authentication mechanism" sent the username, password and PIN of the used accounts to him.
We urge all users who used this script to delete it and change your passwords.
Furthermore, we'd like to thank our fellow SRL Member ggzz for discovering the malicious part, and Mat for questioning the legibility of the script in the first place. Many eyeballs make every little thing like this shallow.

The SRL Staff

Proof: http://villavu.com/forum/showpost.php?p=907007&postcount=17
Original thread: http://villavu.com/forum/showthread.php?t=72974

Damn. I thought it looked kind of sketchy anyways. but didnt expect that

I was actually just about to download it! THANKYOU

i was jusst thinkin bout nat crafting too, good think i second thought that

Bump for those to see.

Another bump for more people to see!

Good job ggzz for spotting it, some people need to remember it's only a game.

yea good catch, that person would have got quite a bit for his rs life but its a horrible pattern to develop in rl (short cuts)
and no this isnt hypocritical for botting :p
jagex has most ppl under the illusion that we are playing unfarily due to botting but essentially they just want to make more money. other wise they would make their own scripts for the most repetitive tasks. it's compliance psychology and i'm personally against manipulation… it dilutes integrity.

anyways guys, keep up the good work and i personally respect the measure you guys take to protect our accounts and identities over this site.

I was going to message a mod about this because I also noticed him asking for a password in a form which sent info online. He sent the script to me and I never downloaded it.

yea i just came back from another fourm that was famous before the bot nuke. he is under the name "Administrator_" and he is trying to pitch his script to others on the site.
i wanna reveal the site but i think its against the rules, it is one of the top ones though. under the thread "Still botting"

You did good, ggzz. :) And thank you Mat questioning his script in the first place, you both did great. Obviously thank you Markus for wiping the dust off the 'ol hammer. ;)

Thank you for warning us. I'm hoping not many people were affected by this. It's a shame people do this…

Thanks for the warning, Sad people do this.

Nicely done ggzz.

Thank you, guys! :)
You're the best for finding out things like that, <3

~Eerik.

Only 3 people got it Scaper, me and someone else, not sure the last one but I hope he hasn't ran it. If he has…
Mat

I read through all the threads about this.. and wow you guys impress me ggzz / harry / kyle etc with reading his code, I would have had no idea other than the .pass in the random letters and plus signs…

it's disgusting these people are coming here now

[admin]xnoob alert, thats why i didnt msg him its obviously it was going to be a scam, he only had like 3 post but a good longivety.[/admin]

Now, I'm just going to point out that we are fully capable of… automating the process of sending in login details.

… And nobody said we have to tell the truth when we send him those details.

:whistling:

was just about to start doing runecraft on my main! wouldn't have been very happy tbh

From: Helper
[admin]xnoob alert, thats why i didnt msg him its obviously it was going to be a scam, he only had like 3 post but a good longivety.[/admin]

Why the admin tags? :cartman:

gz ggzz + Mat

-Boom

Could this been on any other scripts? Because I just got my account wiped out and I never used this script.

As far as we know, nope.

From: Heya69
Could this been on any other scripts? Because I just got my account wiped out and I never used this script.

Most likely from a RAT from a Java bot.

From: Kyle Undefined
Most likely from a RAT from a Java bot.

Never botted using anything other SIMBA, I do not blame SIMBA. I probably got phished, 1bil gone :( -sigh-

And that is why we say not to download scripts from anywhere but this website :)…and/or a trusted SRL member :D <—had to add that part lol

Wow, that sucks. Sorry to hear.

From: hamster31
And that is why we say not to download scripts from anywhere but this website :)…and/or a trusted SRL member :D <—had to add that part lol

I didn't

Outch :/ sorry to anyone who downloaded the script.

i don't get how you could do that and not feel bad about it :/

I am so paranoid right now…..

From: Sytherix
I am so paranoid right now…..

No need to be, it was one person and it was taken care of. If you don't trust a script author, stick to ones made by SRL Members+ or MSI.

Just got hacked for 200m last night, well that's a bummer haha :/ make sure to scan your computers anyone who used it, he's not done yet.
Cheers.
Anubis

It's a good thing I read the scripts before I use them :P Personal preference on the antiban :)

Goodluck to those who are unfortunate enough to fall for it

From: TheAnubis
Just got hacked for 200m last night, well that's a bummer haha :/ make sure to scan your computers anyone who used it, he's not done yet.
Cheers.
Anubis

Doubt it was from Simba…. what scripts have you used, I assure you all of them are safe. Must be some other bot/random file you downloaded.

I've used a great majority of rune crafting scripts as well as various others, it happened again today, and it always seems to occur when running p1nkys pest controll although I doubt the two are related, I've thoroughly checked the script. It could be rarebot as I downloaded the client to test but quickly deleted it. I couldn't pin-point the source to be honest but I'm not too worried, It'll only take a few months to make back hopefully.
Anubis

Good Job Mat and GGZZ. Deserve some + Rep for catching this Cheater!

Hence, why people should analyze the code before running a script. Thank you for the heads up: we need people to search out malicious software and their respective authors'. Interestingly enough, this reminds me much of the time when my friend scripted a keylogger within EpicBot - rather, a script he coded with EpicBot. Amazing how the "average" bot user possesses such levels of absented-minded ignorance - of course it goes without saying, this community and its members are far from "average". Just remember to enable the security extension and check your scripts. Remember: a bit of due diligence may just save your account and your dignity !

What a low life, as if you'd do that.

I had a member message me and ask me to look at a script for him and he suspected it was a password stealer. I did and found no password stealing lines, I would like to suggest to everyone here to help out all the members by looking through scripts and making sure they are safe.

I'm going to start doing this from now on, so if anyone here decides to try and steal some passwords, watch out :)

there are administrators like yohojo who checks up new scripts, of course they cant do it all lightspeed