Tragedy averted, Lesson learned

[Kaye]

So, I was grinding out these last 200k xp until I get a range level at metal dragons today, and I decided to browse our forums for new stuff.
Someone named 'crowe' had posted a plea for voting on a new RS poll: voting for your favorite RS clan/community.
He left a link to the poll which I clicked and signed into rsof. I voted on the poll but, the results didn't show up. So... I thought it was weird that someone from a different clan was asking us to vote for their clan and that there were no results but, like i said, I was at metal dragons, switching back and forth between koa forums and RS, trying not to die by dragon fire or wandering into melee, so my attention was split. So, since I didn't see the results of the poll; I tried to log into the poll link on the RS main page... which asks for my pass.... but, my pass was now invalid.
I was Scammed!!!
as the horror set in, i thought back... and kinda remembered that the 'login' for rsof/polls looked like the old one, and not the new dynamic-animated one; and i hadn't checked the http of the page.

Fortunately, I was still logged into RS, and while i went through the 'stolen pass' recovery process, no damage was done... I banked all my stuff and waited for Jagex to save me.
and they did, in about an hour or so

I had previously taken many of the security measures for granted (questions, registered email, pin updates, etc) I had even helped Jagex deal with a scam site in the past with Mod Stevew but, I won't ever take them so lightly again ...

KOA's Chris was on top of the situation though and deleted the link & then the post(s)... and I hope this 'crowe' person's IP was banned ... and i hope it was just a random attempt and not committed by a jaded former member or a sketchy current one

anyways, for all of you that don't have updated security questions, bank pins, etc ... do it!
takes 2 mins and helps get your acct back in no time if tragedy should strike

just thought i should share this story
-Kaye

[Geve]

Sooooooooooooooo happy it all worked out Kaye!!! *does happy dance*

Seriously, if you see a link in this site which is from someone you don't know as a member.....Please DO NOT click on it. We have certain fail safes in place, but they don't always work.

Thanks to C again

[Deep_Pain]

I'm glad it worked out, the user has been banned by email and IP although I doubt that will block him.

We have several processes to stop bots registering, however we can't stop real people activating accounts and posting.

I know it's too late really, but it might come in handy for others. Apart from the general checks when clicking a link of checking the address in the address bar etc.. New users can only post on the application forums on our boards, so if a new user (name wont be blue and will have very few or 1 posts) makes a post that is anything but an application, please don't click the links.

We did have a measure in place that stopped new users from posting links, but when we updated to the latest version it was knocked out. I'll see if it's possible to get it working again.

Glad everything worked out.

[Lady in Ice]

I`m sooo glad that it worked out, Kaye!!!!

And yeah, don´t enter your RS password anywhere but on www.runescape.com address.

[Sir Chris]

I'm sooooo glad it worked out.

Recovery questions and bank pin are awesome!!

[Deep_Pain]

OK users without permission can not post links / Images / email addresses or use certain BB codes anymore.

[Ewsentinel]

This is always my fear, and why I don't use my RS pass on any other site/account on the Internet. I've had fake site try to trick me into entering it before. Fortunately, I've lucky enough to realize that it's not runescape.com. I'm very glad that it worked out OK for you!

[Kofal]

Wow, glad you were quick to change your pass and stop the hacker.
And fast response here on koa forum

I too only use my rs pass on rs

[Kaye]

I don't normally make it a habit of typing my rs pass on anything other than runescape.com
... it was a momentary lapse of concentration ... the page looked just like the old normal runescape login page for rsof/acct mngmt/etc ...
I just wasn't paying close enough attention ... I also am not that familiar with any of KoA's former members as the post was not a bot product, it was customly addressed to KoA by an individual and seemed fairly genuine.
I know it was my own fault :oops: ; it was the first time it has ever happened to me since I started playing RS, and the first time I ever saw one on a clan site.
I obviously will be extra careful from now on, I was merely sharing the story to remind everyone who reads it to be extra careful as well.
-cheers

[Geve]

*hugs* And Ty Kaye There is a lesson there for alot of people ;)

[Dr Brad]

Hence my policy to not to play RS when I'm drunk!

Oops! Did I say that publicly?

[Deep_Pain]

you mean that's you sober?

[Dr Brad]

you mean that's you sober?

Uhmm... I'm not quite sure. Can I get back to you on this?

[Nooni]

Hence my policy to not to play RS when I'm drunk!

Oops! Did I say that publicly?

Yes best not to play when under the influence... of anything or when distracted

[Ewsentinel]

Oh, I disagree. Playing RS under the influence is the BEST way! It's especially enjoyable if you're doing something boring/mind numbing such as grinding out levels. It makes the time pass more enjoyably.