Today I was stupid. I got an e-mail from "noreply@a.runescape.com", see below.

Since I don't play RS, and last time I did was well over a decade, I let my guard down. First thing I checked the e-mail adress, and google reported it's a legit jagex one.

I did not initialize such a thing, so I wanted to cancel that. Being reckless on my phone while shitting, I hit the link (which btw isn't spoofed - hoovering shows the same) - and ta-da, i confirmed a password change.

TL;DR:
Hacker/phisher has my account, attached to his mail and I finalized a PW request change for him, by clicking the link.


Now I wonder: are there any risks involved with someone having hijacked your Runescape account? As I said I don't play/care for RS, but could he use these new data to hurt my friends? or hurt me?

What do you runescape players know? Should I contact Jagex?





This post was edited by SpAz. on Sep 16 2019 04:30am

Got those emails daily tho..

Seems fake to me so I ignore them.

E:\ I've seen/heard that they're using them to suicide bot the accounts.
Or I might be wrong tho, Not sure it's what I saw somewhere or someone told me that.

This post was edited by Harv on Sep 16 2019 05:01am

Yeah, the sender adress is definitely spoofed.
I filed some kind of appeal to jagex, providing these info. Hopefully the hijacker gets shut out from doing whatever malicious things he wanted to do. More than likely he succeeded though - theres not a shot in hell that i'll remember enough info from 2008-ish to recover that account.


edit: idk if this info cud help anyone but I got another email, saying user "Tozik91" has got password reset denied. That is not me - likely the hijacker. Got name of email adress changed to aswell - idiot is def born 1991. or it's just a bot that does this process, idk.

This post was edited by SpAz. on Sep 16 2019 05:07am

The only thing they can really do with it is impersonate you to your friends, which since you haven't been active I highly doubt many if any of them still play.
He will definitely take whatever is on the account or use it to scam / bot. If you don't play it I wouldn't worry about it. Avoid these emails entirely. I don't open any emails by "Jagex" unless I have directly attempted to change my password and I am immediately awaiting a confirmation email.

Good luck contacting jagex. Their customer support is #1 dogshit

#last

Pretty sad when you have to reach out to the mfers via twitter

Dn8 TY

For real shit has always been mind boggling to me

Right?



ohai andrewwww