Hello,

I was victim of very clever scam method. Maybe it has been out for longer ,but I heard about it first time when I was also vicitim yesterday.

So what is this scam method?

I was looking for some membership game cards in upgrade section. I contacted one seller. He showed some method where I just copy URL and he does not even need password from me to apply membership. So I did this URL and stayed loged in on my account . Then he found out that his membership cards are not working . So we decided to end trade. I change password on my account just to be sure. On next day I logon account and found myself totally cleaned. I was very disappointed . I was thinking about how is it possible. I came with conclusion that it have to be keylogger,so I scanned my PC with AV, but nothing has been found . So I asked my friend who is working in AV developing company to look into my RSIT and COMBOFIX logs ,but he did not find nothing. We also managed to set firewall that logs all connection in my router in house. However we did not find any suspicious activity. So I changed my password again on another computer. Next day I logged in and find myself cleaned again. Very interesting thing was that scammer has never changed password ,so he could not do this by e-mail or recorvery . I was thinking again about keylogger, but I was also suprised ,that he cleaned only this one account and not any other that I logged in with them and they had much more whealth. I decided to change all my account setting - recorverys ,password etc.. outside in my friend house. Once I was going to check Facebook associations , I found out where the problem is. He associated his facebook account with my runescape and he could easily hack me,even if I changed password.

So I think there should be warning somewhere ,which will inform buyers to check their Facebook associations on their Runescape account after every upgrade ,that someone else applied on their account ,or even if he did not applied and they give him password or url.

Any supporters?

If that is actually possible then it should be posted in every section involving other people using your runescape account. From the sounds of it, it appears that anyone who is purchasing an upgrade to someone buying skill training is at risk of this happening. It should probably be a sticky with a message that says something along the lines of:

"Remember to check your facebook/runescape account associations before and after EVERY transaction involving someone else having access to your account."

People should always check their account afterwards anyway.
Also be wary of any links, if they ask you to do something that you're not sure of, then don't.

But I Support what x339 says as well.

__________________

actually i forgot to tell you that this happened to me since october since i bought an account since then they keep hacking it someone in australia idk if its a vpn or not but idk how they keep doing it 1 week ago i was about to transfer my whole bank to my pure and then i see my pure account log in i was like wtf i had just changed the password and had recently quit another account because it was keylogged or something and now they knew my password so i was forced to quit my account and my advice to you is set a bank pin because when they got in my pure they only tried to figure the pin (which they dint) so just secure your money in a safe account

I support that there should be sickies pointing out this situation. It is dangerous to give your account to anyone, whether it be upgrades or skilling. Being an upgrader myself, I can see how a customer could be afraid of this. You should only trade with trusted members for upgrades and skilling, and always check your account after.

I must admit that it's indeed a pretty clever idea. I'm not sure if associating RuneScape with facebook works the same as e-mail registration. If you want to change e-mails you have to confirm it from both the e-mails and the other guy will most likely not have access to your own e-mail. This might be the same with Facebook, but if you haven't associated it with RuneScape (I personally have't and never will) someone might be able to put his facebook profile on there straight away.

__________________

Maybe it's a Phishing site, although that doesn't explain how he could've clean you twice when you changed the password.

Uhm what are you talking about? I tried to explain it pretty well. It was because he associated his facebook to my runescape account ,since I do not use facebook and I have never had associated it with my runescape account ,so I did not notice it. So he could easily login wiht facebook and he did not even need my password. Therefore its pretty dangerous. There have to be warning about it. If you give your account to anyone for any reason, you have to check facebook association after it.

Ohh, now I get it, clever scam.

I support there should be a sticky explaining this scam.

at first it sounded like a rat, but thats just weird, ye it needs a sticky

Wow thats really clever, i agree with sticky needed.

support but now i think that others are reading this they will try it lol.

Shouldn't take more than a minute or two to add a warning for that in the stickies, support.

support, but I find it stupid why would you log into a site where someone else gives you?

__________________

Already got stickied by Karl, guess this can be closed?