I've been getting emails from noreply@a.jagex.com saying they received a request to reset my password. It actually addresses me by my RS display name. I have a feeling that this might be legit and someone is trying to get into my account, but i have 2 factor authentication protecting me. Anyone else getting emails like this?

I got the same thing on June 22. I ignored it, but it is concerning that it contains our usernames.

I haven’t logged into RS in a while. Maybe I will tonight and see if everything is okay (posting from my phone).

__________________

Yeah it is. I heard of phishing emails that don't contain your RS name. I also got the same email on my second account.

Doesn't RS reset your password if you ignore such messages for long enough? Might as well go to their official site and change it, it's not like you'd be out anything for doing so.

__________________


.

.Legendary themed months are back! Maybe.

!!!!!!!!!!!!!!!!!!!!!!!!

I'm not sure if it changes by itself. But I decided to change my password anyway.

I've been getting these emails for 4 different accounts for 3 years or so. Most I can tell is they grab it from old botting compendiums and clan forums.

__________________

That makes me feel a bit better then it's not like someone is actively trying to get into my account.

I missed that you posted the link and it's NOT jagex.com. I feel obligated to point out that if you do change your password you should go through the official site and not any links the email provides, since the email is clearly fake at this point.

__________________


.

.Legendary themed months are back! Maybe.

!!!!!!!!!!!!!!!!!!!!!!!!

I did change my password directly from the RS website and not that email.

Ok, I checked my account. Didn’t appear to be tampered with (last login was 99 days ago), but I reset my password anyway just to be safe.



If you’re referring to noreply@a.jagex.com - that is actually an Official Jagex email (as I discovered today). It’s the one that I got my email from on 6/22, and today when I officially reset my password.

One just needs to enter your username, select “forgot password”, and such an email will be received by the account’s true owner.

Not sure what the plan is, since they would need to have the target’s email address and password as well. If I had to guess, our account details are probably on some list (maybe the dark web idk) that may be considered potentially-vulnerable to attack, based on historical security flaws across multiple accounts.

Anyway just be vigilant, change your password(s) if you have any reason to think that your account(s) may be at risk. Use two-factor authentication if you don’t already - I recommend Google Authenticator.

__________________

It's a little unsettling that that has happened to more than one of my accounts and it's happened to other people for all their accounts. But i do have google authenticator, so i feel better. I also wish that Jagex still had JAG. Having both at the same time would make our accounts very secure.

what why would they do this that's just not a trustworthy address domain at all

Weird.

__________________


.

.Legendary themed months are back! Maybe.

!!!!!!!!!!!!!!!!!!!!!!!!

I did some research and see that if anyone had JAG, it is still active.

I was looking through the RS news, and saw this:
https://secure.runescape.com/m=news/c=K ... -13th-14th

It’s oddly comforting to know that it’s this widespread of an issue, isn’t it? I was concerned when I received the original email on 6/22. Knowing what we know now, it feels less like a direct attack, and more like a pervasive problem.

Anyway, Petrifiedparrot are you in our Discord channel? Lots of people have usernames in Discord that differ from their forum usernames, so forgive me if I’ve neglected to notice. But if not, you should join in.

__________________

I'm not in the discord. I'd like to join it.

I pm’d you an invite. It expires in 24hrs so let me know if it doesn’t work.

__________________

I'd recommend changing your password just in case (not through that link though, of course).

I had about 10 emails like that and I ignored them for phishing attempts - turns out it was an actual person that ended up successfully getting into my account through password recovery (how? no clue) and losing my valuables. At the time, I didn't play very much so it wasn't until 2 months when I went to login that I realized it.

__________________
RV Dedication Drop Party IV
178th to 126 Combat - June '06.
Retired from Runescape and Runevillage.
Currently Playing - Dying Light, Control
Add me on Ps4 (Alpr) or Steam (Alpr101) (more active on steam)!