RuneVillage.com

Re: Runescape reset password Phishing emails?

2020-10-27T12:58:25-06:00

I'd recommend changing your password just in case (not through that link though, of course).

I had about 10 emails like that and I ignored them for phishing attempts - turns out it was an actual person that ended up successfully getting into my account through password recovery (how? no clue) and losing my valuables. At the time, I didn't play very much so it wasn't until 2 months when I went to login that I realized it.

Statistics: Posted by Alpr — October 27th, 2020, 12:58 pm

Re: Runescape reset password Phishing emails?

2020-07-05T10:53:19-06:00

I pm’d you an invite. It expires in 24hrs so let me know if it doesn’t work.

Statistics: Posted by Jackstick — July 5th, 2020, 10:53 am

Re: Runescape reset password Phishing emails?

2020-07-04T12:30:14-06:00

I'm not in the discord. I'd like to join it.

Statistics: Posted by Petrifiedparrot — July 4th, 2020, 12:30 pm

Re: Runescape reset password Phishing emails?

2020-07-02T23:11:07-06:00

It’s oddly comforting to know that it’s this widespread of an issue, isn’t it? I was concerned when I received the original email on 6/22. Knowing what we know now, it feels less like a direct attack, and more like a pervasive problem.

Anyway, Petrifiedparrot are you in our Discord channel? Lots of people have usernames in Discord that differ from their forum usernames, so forgive me if I’ve neglected to notice. But if not, you should join in.

Statistics: Posted by Jackstick — July 2nd, 2020, 11:11 pm

Re: Runescape reset password Phishing emails?

2020-07-01T20:54:57-06:00

I was looking through the RS news, and saw this:
https://secure.runescape.com/m=news/c=K ... -13th-14th

Statistics: Posted by Petrifiedparrot — July 1st, 2020, 8:54 pm

Re: Runescape reset password Phishing emails?

2020-07-01T10:58:07-06:00

Petrifiedparrot wrote:

But i do have google authenticator, so i feel better. I also wish that Jagex still had JAG. Having both at the same time would make our accounts very secure.

I did some research and see that if anyone had JAG, it is still active.

Statistics: Posted by Petrifiedparrot — July 1st, 2020, 10:58 am

Re: Runescape reset password Phishing emails?

2020-06-30T12:59:47-06:00

Jackstick wrote:

Saten Ruiko wrote:

I missed that you posted the link and it's NOT jagex.com. I feel obligated to point out that if you do change your password you should go through the official site and not any links the email provides, since the email is clearly fake at this point.

what why would they do this that's just not a trustworthy address domain at all

Weird.

Statistics: Posted by Saten Ruiko — June 30th, 2020, 12:59 pm

Re: Runescape reset password Phishing emails?

2020-06-29T21:03:51-06:00

It's a little unsettling that that has happened to more than one of my accounts and it's happened to other people for all their accounts. But i do have google authenticator, so i feel better. I also wish that Jagex still had JAG. Having both at the same time would make our accounts very secure.

Statistics: Posted by Petrifiedparrot — June 29th, 2020, 9:03 pm

Re: Runescape reset password Phishing emails?

2020-06-29T19:55:55-06:00

Ok, I checked my account. Didn’t appear to be tampered with (last login was 99 days ago), but I reset my password anyway just to be safe.

Saten Ruiko wrote:

If you’re referring to noreply@a.jagex.com - that is actually an Official Jagex email (as I discovered today). It’s the one that I got my email from on 6/22, and today when I officially reset my password.

One just needs to enter your username, select “forgot password”, and such an email will be received by the account’s true owner.

Not sure what the plan is, since they would need to have the target’s email address and password as well. If I had to guess, our account details are probably on some list (maybe the dark web idk) that may be considered potentially-vulnerable to attack, based on historical security flaws across multiple accounts.

Anyway just be vigilant, change your password(s) if you have any reason to think that your account(s) may be at risk. Use two-factor authentication if you don’t already - I recommend Google Authenticator.

Statistics: Posted by Jackstick — June 29th, 2020, 7:55 pm

Re: Reset password Phishing emails?

2020-06-28T12:01:41-06:00

I did change my password directly from the RS website and not that email.

Statistics: Posted by Petrifiedparrot — June 28th, 2020, 12:01 pm

Re: Reset password Phishing emails?

2020-06-28T00:46:01-06:00

Statistics: Posted by Saten Ruiko — June 28th, 2020, 12:46 am

Re: Reset password Phishing emails?

2020-06-27T23:56:05-06:00

That makes me feel a bit better then it's not like someone is actively trying to get into my account.

Statistics: Posted by Petrifiedparrot — June 27th, 2020, 11:56 pm

Re: Reset password scam?

2020-06-27T22:18:27-06:00

I've been getting these emails for 4 different accounts for 3 years or so. Most I can tell is they grab it from old botting compendiums and clan forums.

Statistics: Posted by Hojunhu — June 27th, 2020, 10:18 pm

Re: Reset password scam?

2020-06-27T15:22:31-06:00

I'm not sure if it changes by itself. But I decided to change my password anyway.

Statistics: Posted by Petrifiedparrot — June 27th, 2020, 3:22 pm

Re: Reset password scam?

2020-06-27T14:20:51-06:00

Doesn't RS reset your password if you ignore such messages for long enough? Might as well go to their official site and change it, it's not like you'd be out anything for doing so.

Statistics: Posted by Saten Ruiko — June 27th, 2020, 2:20 pm

Re: Reset password scam?

2020-06-27T13:25:29-06:00

Yeah it is. I heard of phishing emails that don't contain your RS name. I also got the same email on my second account.

Statistics: Posted by Petrifiedparrot — June 27th, 2020, 1:25 pm

Re: Reset password scam?

2020-06-27T10:50:02-06:00

I got the same thing on June 22. I ignored it, but it is concerning that it contains our usernames.

I haven’t logged into RS in a while. Maybe I will tonight and see if everything is okay (posting from my phone).

Statistics: Posted by Jackstick — June 27th, 2020, 10:50 am

Runescape reset password Phishing emails?

2020-06-24T13:24:21-06:00

I've been getting emails from noreply@a.jagex.com saying they received a request to reset my password. It actually addresses me by my RS display name. I have a feeling that this might be legit and someone is trying to get into my account, but i have 2 factor authentication protecting me. Anyone else getting emails like this?

Statistics: Posted by Petrifiedparrot — June 24th, 2020, 1:24 pm