All times are UTC - 6 hours




Post new topic Reply to topic   Page 1 of 1
 [ 17 posts ] 
Author Message

 Post subject: Runescape reset password Phishing emails?
PostPosted: June 24th, 2020, 1:24 pm 
Priest of Saradomin
Priest of Saradomin

Joined: January 31st, 2007, 8:05 pm
Posts: 1,197
Gender: Male
Status: Offline
I've been getting emails from noreply@a.jagex.com saying they received a request to reset my password. It actually addresses me by my RS display name. I have a feeling that this might be legit and someone is trying to get into my account, but i have 2 factor authentication protecting me. Anyone else getting emails like this?


Last edited by Petrifiedparrot on June 29th, 2020, 11:23 am, edited 2 times in total.
Top
 Profile
 

 Post subject: Re: Reset password scam?
PostPosted: June 27th, 2020, 10:50 am 
weɪfərskɪt
Chat Moderator
Chat Moderator
User avatar

Joined: November 15th, 2003, 11:22 am
Posts: 20,519
Location: Pinwheel Galaxy
Gender: Male
Status: Offline
I got the same thing on June 22. I ignored it, but it is concerning that it contains our usernames.

I haven’t logged into RS in a while. Maybe I will tonight and see if everything is okay (posting from my phone).

__________________
Image


Top
 Profile
 

 Post subject: Re: Reset password scam?
PostPosted: June 27th, 2020, 1:25 pm 
Priest of Saradomin
Priest of Saradomin

Joined: January 31st, 2007, 8:05 pm
Posts: 1,197
Gender: Male
Status: Offline
Yeah it is. I heard of phishing emails that don't contain your RS name. I also got the same email on my second account.


Top
 Profile
 

 Post subject: Re: Reset password scam?
PostPosted: June 27th, 2020, 2:20 pm 
Level 0
Village Elder
Village Elder
User avatar

Joined: May 13th, 2004, 6:41 pm
Posts: 18,918
Location: The Tower of Mist
Status: Offline

Donor: Wizard (2013)
Friend of Hiker
Doesn't RS reset your password if you ignore such messages for long enough? Might as well go to their official site and change it, it's not like you'd be out anything for doing so.

__________________
Image

.
Image

.
Legendary themed months are back! Maybe.
Image
!!!!!!!!!!!!!!!!!!!!!!!!


Top
 Profile WWW 
 

 Post subject: Re: Reset password scam?
PostPosted: June 27th, 2020, 3:22 pm 
Priest of Saradomin
Priest of Saradomin

Joined: January 31st, 2007, 8:05 pm
Posts: 1,197
Gender: Male
Status: Offline
I'm not sure if it changes by itself. But I decided to change my password anyway.


Top
 Profile
 

 Post subject: Re: Reset password scam?
PostPosted: June 27th, 2020, 10:18 pm 
HojunWHO?
Village Elder
Village Elder
User avatar

Joined: July 12th, 2005, 6:54 am
Posts: 5,665
Location: Snowy Ol' Canada
Gender: Male
Status: Offline

Donor: Prince (2010)
I've been getting these emails for 4 different accounts for 3 years or so. Most I can tell is they grab it from old botting compendiums and clan forums.

__________________
Image


Top
 Profile
 

 Post subject: Re: Reset password Phishing emails?
PostPosted: June 27th, 2020, 11:56 pm 
Priest of Saradomin
Priest of Saradomin

Joined: January 31st, 2007, 8:05 pm
Posts: 1,197
Gender: Male
Status: Offline
That makes me feel a bit better then it's not like someone is actively trying to get into my account.


Top
 Profile
 

 Post subject: Re: Reset password Phishing emails?
PostPosted: June 28th, 2020, 12:46 am 
Level 0
Village Elder
Village Elder
User avatar

Joined: May 13th, 2004, 6:41 pm
Posts: 18,918
Location: The Tower of Mist
Status: Offline

Donor: Wizard (2013)
Friend of Hiker
I missed that you posted the link and it's NOT jagex.com. I feel obligated to point out that if you do change your password you should go through the official site and not any links the email provides, since the email is clearly fake at this point.

__________________
Image

.
Image

.
Legendary themed months are back! Maybe.
Image
!!!!!!!!!!!!!!!!!!!!!!!!


Top
 Profile WWW 
 

 Post subject: Re: Reset password Phishing emails?
PostPosted: June 28th, 2020, 12:01 pm 
Priest of Saradomin
Priest of Saradomin

Joined: January 31st, 2007, 8:05 pm
Posts: 1,197
Gender: Male
Status: Offline
I did change my password directly from the RS website and not that email.


Top
 Profile
 

 Post subject: Re: Runescape reset password Phishing emails?
PostPosted: June 29th, 2020, 7:55 pm 
weɪfərskɪt
Chat Moderator
Chat Moderator
User avatar

Joined: November 15th, 2003, 11:22 am
Posts: 20,519
Location: Pinwheel Galaxy
Gender: Male
Status: Offline
Ok, I checked my account. Didn’t appear to be tampered with (last login was 99 days ago), but I reset my password anyway just to be safe.

Saten Ruiko wrote:
I missed that you posted the link and it's NOT jagex.com. I feel obligated to point out that if you do change your password you should go through the official site and not any links the email provides, since the email is clearly fake at this point.


If you’re referring to noreply@a.jagex.com - that is actually an Official Jagex email (as I discovered today). It’s the one that I got my email from on 6/22, and today when I officially reset my password.

One just needs to enter your username, select “forgot password”, and such an email will be received by the account’s true owner.

Not sure what the plan is, since they would need to have the target’s email address and password as well. If I had to guess, our account details are probably on some list (maybe the dark web idk) that may be considered potentially-vulnerable to attack, based on historical security flaws across multiple accounts.

Anyway just be vigilant, change your password(s) if you have any reason to think that your account(s) may be at risk. Use two-factor authentication if you don’t already - I recommend Google Authenticator.

__________________
Image


Top
 Profile
 

 Post subject: Re: Runescape reset password Phishing emails?
PostPosted: June 29th, 2020, 9:03 pm 
Priest of Saradomin
Priest of Saradomin

Joined: January 31st, 2007, 8:05 pm
Posts: 1,197
Gender: Male
Status: Offline
It's a little unsettling that that has happened to more than one of my accounts and it's happened to other people for all their accounts. But i do have google authenticator, so i feel better. I also wish that Jagex still had JAG. Having both at the same time would make our accounts very secure.


Top
 Profile
 

 Post subject: Re: Runescape reset password Phishing emails?
PostPosted: June 30th, 2020, 12:59 pm 
Level 0
Village Elder
Village Elder
User avatar

Joined: May 13th, 2004, 6:41 pm
Posts: 18,918
Location: The Tower of Mist
Status: Offline

Donor: Wizard (2013)
Friend of Hiker
Jackstick wrote:
Saten Ruiko wrote:
I missed that you posted the link and it's NOT jagex.com. I feel obligated to point out that if you do change your password you should go through the official site and not any links the email provides, since the email is clearly fake at this point.


If you’re referring to noreply@a.jagex.com - that is actually an Official Jagex email (as I discovered today). It’s the one that I got my email from on 6/22, and today when I officially reset my password.
what why would they do this that's just not a trustworthy address domain at all

Weird.

__________________
Image

.
Image

.
Legendary themed months are back! Maybe.
Image
!!!!!!!!!!!!!!!!!!!!!!!!


Top
 Profile WWW 
 

 Post subject: Re: Runescape reset password Phishing emails?
PostPosted: July 1st, 2020, 10:58 am 
Priest of Saradomin
Priest of Saradomin

Joined: January 31st, 2007, 8:05 pm
Posts: 1,197
Gender: Male
Status: Offline
Petrifiedparrot wrote:
But i do have google authenticator, so i feel better. I also wish that Jagex still had JAG. Having both at the same time would make our accounts very secure.

I did some research and see that if anyone had JAG, it is still active.


Top
 Profile
 

 Post subject: Re: Runescape reset password Phishing emails?
PostPosted: July 1st, 2020, 8:54 pm 
Priest of Saradomin
Priest of Saradomin

Joined: January 31st, 2007, 8:05 pm
Posts: 1,197
Gender: Male
Status: Offline
I was looking through the RS news, and saw this:
https://secure.runescape.com/m=news/c=K ... -13th-14th


Top
 Profile
 

 Post subject: Re: Runescape reset password Phishing emails?
PostPosted: July 2nd, 2020, 11:11 pm 
weɪfərskɪt
Chat Moderator
Chat Moderator
User avatar

Joined: November 15th, 2003, 11:22 am
Posts: 20,519
Location: Pinwheel Galaxy
Gender: Male
Status: Offline
It’s oddly comforting to know that it’s this widespread of an issue, isn’t it? I was concerned when I received the original email on 6/22, made serene when I saw your original post, and even more so now that I know that it’s this extensive. Knowing what we know now, it feels less like a direct attack, and more like a pervasive problem.

Anyway, Petrifiedparrot are you in our Discord channel? Lots of people have usernames in Discord that differ from their forum usernames, so forgive me if I’ve neglected to notice. But if not, you should join in.

__________________
Image


Top
 Profile
 

 Post subject: Re: Runescape reset password Phishing emails?
PostPosted: July 4th, 2020, 12:30 pm 
Priest of Saradomin
Priest of Saradomin

Joined: January 31st, 2007, 8:05 pm
Posts: 1,197
Gender: Male
Status: Offline
I'm not in the discord. I'd like to join it.


Top
 Profile
 

 Post subject: Re: Runescape reset password Phishing emails?
PostPosted: July 5th, 2020, 10:53 am 
weɪfərskɪt
Chat Moderator
Chat Moderator
User avatar

Joined: November 15th, 2003, 11:22 am
Posts: 20,519
Location: Pinwheel Galaxy
Gender: Male
Status: Offline
I pm’d you an invite. It expires in 24hrs so let me know if it doesn’t work.

__________________
Image


Top
 Profile
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  Page 1 of 1
 [ 17 posts ] 

All times are UTC - 6 hours


Who is online

Users browsing this forum: No registered users and 3 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Jump to:  

Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
The Village and this web site are © 2002-2012

ThePub 2.0 - Designed by Goten & Jackstick. Coded by Glodenox & Henner.
With many thanks to the Website Team!