SRL Archive - RuneScape News and General

This morning i was awakened by my brother shaking me, whimpering to me that we have been hacked. Of course, at first i didnt believe him, but as i got online to see our money pouch empty, and our bank stripped of anything with monetary value… The deep realization hit.

I did not make this post to whine or complain or beg for money to rebuild my back, no, i just want to warn everyone. I was hacked by powerbot. I am 98% sure they are the ones responsible. I am careful not to do anything to put my account at risk, the only stupid thing i've done, is use powerbot.

How they got my account info i am still perplexed over, i made sure never to preload my password and pin, i would always do it by hand, and in fact i havent used any scripts the require a password. So how the got in my bank is still a mystery to me. Something ironic about this though, is just yesterday my friend who uses powerbot, was also cleaned. And i told myself it would never happen to me..

So to all the fellow community members out there who use powerbot, please, please, PLEASE, be careful. I dont want you to have to share the same fate that i have had to meet.

I highly doubt Powerbot actually hacked you, but it is possible

Could of been a private server.

That's why I exercise extreme caution using anything other than Simba. I use a VM, a virtual keyboard to randomize keystrokes, never enter any information into the powerbot client, and change my password regularly.

Please post any other security tips you might have.

Ouch, that sucks man. :/

From: tankerzz
Could of been a private server.

What are you talking about?

I also use powerbot but if it's not the runescape client, i enter password with an onscreen keyboard..

From: xTheWayOfTheWarriorx
What are you talking about?

When you allow Java to run on your computer, a website can send files to your computer without your knowledge. If you have played a lot of different private servers then you are more than likely to be infected with a keylogger.

From: tankerzz
When you allow Java to run on your computer, a website can send files to your computer without your knowledge. If you have played a lot of different private servers then you are more than likely to be infected with a keylogger.

No, I know it wasn't that.

op it wasn't pb as long as you only used SDN scripts you are 100% safe, if you used dev mode adding scripts then you aren't safe there… anyways it could probably be your brothers fault, he probably fell for those phishing jagex emails or something downloaded from elsewhere… wte the reason you guys had really bad luck.

So many people getting hacked, this is just horrible.
Sorry to hear this mate.

it wasn't powerbot, they are a registered company and wouldn't risk getting sued for the 10m or whatever on your account

i have all details, including pin saved on client, no problems

Saving your account information on the client doesn't matter.

They have it stored already.

Yeah I will never enter my pin into that client.. too scared!

From: blinkblink
op it wasn't pb as long as you only used SDN scripts you are 100% safe, if you used dev mode adding scripts then you aren't safe there… anyways it could probably be your brothers fault, he probably fell for those phishing jagex emails or something downloaded from elsewhere… wte the reason you guys had really bad luck.

No, he knows all about phishing sites. So if you guys don't think it was powerbot, what could it have been?? :/

also as a warning simba has accidentally entered my username and password into the chat box thinking it was the loggin page. Hence i dont put my username or password on the script.

From: whitetiger
also as a warning simba has accidentally entered my username and password into the chat box thinking it was the loggin page. Hence i dont put my username or password on the script.

That's not Simba, but a poorly coded script…scripters should always check to see if it's logged in before it does anything.

From: 321
it wasn't powerbot, they are a registered company and wouldn't risk getting sued for the 10m or whatever on your account

i have all details, including pin saved on client, no problems

I doubt u can really sue a company for hacking a virtual account? Besides pb is funded (or somewhere along that line) by gold4rs, so they can be based in China which would be impossible to be sued. Furthermore its way too easy to hack with a proxy etc or just ask their comrades in China to do it for them so there is no way anyone can give any evidence that pb hacked them.

As long as u entered ur username/pass/pin through the pb client (either manually or stored) they can capture it (we dont even know what the client is capable of since we dont have the source code)

SIGH, here we go.
When you login to PowerBot, regardless of you entering your info into the client, the values are stored and hooked.
So they can basically get your PIN without you needing to enter it.

From: 321
it wasn't powerbot, they are a registered company and wouldn't risk getting sued for the 10m or whatever on your account

i have all details, including pin saved on client, no problems

I lost 105k red chins i was gonna merch for bot nuke, full bandos, 25k cannonballs, around 20k of each rune, tele tabs, 4k dragon bones, full gano, and who knows what else. Thanksbai…

Maybe your brother "hacked" you? Pointing at powerbot as the culprit would be extremely convenient.

From: Maxalon
Maybe your brother "hacked" you? Pointing at powerbot as the culprit would be extremely convenient.

We've been sharing the account for 4 years now.. but Idk tbh right now im not going to shoot down any ideas.

I'm sure sorry to hear about this pal. :( It's so hard to trust anything else given their reputation. It's happened in the past so I for one am not surprised. I honestly hope you'll break away from using that bot and spent more time with Simba. :)

Most likely a keylogger. Although possible that it was PB, has happened in the past. But unlikely. I would still clean the computer and then bot back the bank.

That's pretty sad, sorry for your loss :( , but are you really sure it was PB? There are so many other ways of getting hacked..

Sorry for your loss.

FYI

Powerbot.org is owned by a "legit" company by the name of
J.P. HOLDINGS INT'L LTD (18 month old company)

They've changed more "directors" than street hookers with their wigs.

How can you not trust a "company" with Middle Eastern names like MR AADIL AHMED and DIRECTOR AYESHA MALIK that's funded by gold farming company in China, wait! What TF??!!?.

They've changed their address 3 times, started from someone's apartment/basement a.k.a a Flat.

Need a company? Call +44 1-800-Rent-a-name (CASH ONLY)


3 Jul 2012
CHANGE OF REGISTERED OFFICE ADDRESS
REGISTERED OFFICE CHANGED ON 03/07/2012 FROM, THE BRISTOL OFFICE 2 SOUTHFIELD ROAD, WESTBURY-ON-TRYM, BRISTOL, BS9 3BH, UNITED KINGDOM
26 Mar 2012
ANNUAL RETURN
26/03/12 FULL LIST
12 Jan 2012
TERMINATION OF APPOINTMENT OF DIRECTOR
APPOINTMENT TERMINATED, DIRECTOR AYESHA MALIK
12 Jan 2012
APPOINTMENT OF DIRECTOR
DIRECTOR APPOINTED MR AADIL AHMED
1 Sep 2011
TERMINATION OF APPOINTMENT OF DIRECTOR
APPOINTMENT TERMINATED, DIRECTOR PATRICE DOE
1 Sep 2011
APPOINTMENT OF DIRECTOR
DIRECTOR APPOINTED MS AYESHA MALIK
8 Apr 2011
CHANGE OF REGISTERED OFFICE ADDRESS
REGISTERED OFFICE CHANGED ON 08/04/2011 FROM, FLAT 1 HARMOOD HOUSE, HARMOOD STREET, LONDON, NW1 8DY, UNITED KINGDOM
30 Mar 2011
FILING DATED 30 MARCH 2011
CERTIFICATE OF INCORPORATION, GENERAL COMPANY DETAILS & STATEMENTS OF;, OFFICERS, CAPITAL & SHAREHOLDINGS, GUARANTEE, COMPLIANCE, MEMORANDUM OF ASS…

(exact copy and paste "MEMORANDUM OF ASS…" lol)
source:
http://opencorporates.com/companies/gb/07584150

@Shanghai
Memorandum of ASS? LOL

@Warrior
I'm sorry for your losses :(

Nice story, love the way it was wrote; it was dramatic. :)