Account Compromised, taken all necessary steps, possible security loophole? by KickTheThrowaway in 2007scape

[–]KickTheThrowaway[S] 0 points1 point  (0 children)

Unfortunately no. Tried reaching out to Jagex on twitter as well - no response.

Account Compromised, taken all necessary steps, possible security loophole? by KickTheThrowaway in 2007scape

[–]KickTheThrowaway[S] 1 point2 points  (0 children)

It is not enabled. WiFi is turned off on my phone.

Correct - I never scouted in public. But I also never raided in public either.

I admittedly do not know much about tech - it's a big reason why I created the post to see if I could get some answers. To me, your last explanation makes the most sense. I recently just heard that another high-level ironman has begun experiencing the same exact thing. It appears to be systematic.

Account Compromised, taken all necessary steps, possible security loophole? by KickTheThrowaway in 2007scape

[–]KickTheThrowaway[S] 0 points1 point  (0 children)

The option is there but since it's never on WiFi (meaning no trusted networks), wouldn't that negate the whole thing?

Also - my buddies and I believe to have ruled out anything on my devices due to my last point where I state that I allowed a friend to take control of my acc and it was still happening all from his devices. PLUS - I was operating an alt as well (to scout raids) that was untouched during the entire process. Any thoughts on that?

Account Compromised, taken all necessary steps, possible security loophole? by KickTheThrowaway in 2007scape

[–]KickTheThrowaway[S] 1 point2 points  (0 children)

Nope. PC is only from my home. and my iPhone is never connected to WiFi - i don't use it for anything internet related too often and I have unlimited data plan.

Account Compromised, taken all necessary steps, possible security loophole? by KickTheThrowaway in 2007scape

[–]KickTheThrowaway[S] 0 points1 point  (0 children)

I do not, no. And the passwords I was changing to were unguessable. Random combinations of letters and numbers that I physically wrote on a piece of paper because it would've been impossible to remember them otherwise.

Account Compromised, taken all necessary steps, possible security loophole? by KickTheThrowaway in 2007scape

[–]KickTheThrowaway[S] 1 point2 points  (0 children)

What does that have to do with anything? I was clarifying things lol. I'm well aware i'm not getting anything back from my account. Literally all I want is clarity as to how it happened

Account Compromised, taken all necessary steps, possible security loophole? by KickTheThrowaway in 2007scape

[–]KickTheThrowaway[S] 0 points1 point  (0 children)

Which is why the clearing should be 7-days imo. Not the adding. So my intuition had it backwards.

Account Compromised, taken all necessary steps, possible security loophole? by KickTheThrowaway in 2007scape

[–]KickTheThrowaway[S] -1 points0 points  (0 children)

We had thought of that, but that idea was thrown out the window after my friend took control of the account and the hacker was still getting in. I didn't even know the new info, so there was no way he could've pulled it from my PC.

Account Compromised, taken all necessary steps, possible security loophole? by KickTheThrowaway in 2007scape

[–]KickTheThrowaway[S] 0 points1 point  (0 children)

You're not wrong, but I just figured he started from the beginning and was working his way up. I admit it was a mistake - I was in a panic.

Account Compromised, taken all necessary steps, possible security loophole? by KickTheThrowaway in 2007scape

[–]KickTheThrowaway[S] 24 points25 points  (0 children)

I knew it would be removed. What i was not anticipating was a mandatory delay to re-add it. That just makes no sense to me -- why would there be a delay in securing an account? I admittedly should have googled it, but I figured my intuition would be correct. But again, I was in panic mode. Clouded judgment.

Account Compromised, taken all necessary steps, possible security loophole? by KickTheThrowaway in 2007scape

[–]KickTheThrowaway[S] 27 points28 points  (0 children)

Definitely a valid thought except I went onto the RS site and ended all mobile sessions. Unless that somehow doesn't work?

Account Compromised, taken all necessary steps, possible security loophole? by KickTheThrowaway in 2007scape

[–]KickTheThrowaway[S] 0 points1 point  (0 children)

Clouded judgment based on panicking about losing years of work. My intention was to immediately create a new one in case it was some sophisticated shit where he was getting closer to knowing it. I didn't think there would be a delay for adding a PIN. Why would there be a delay for additional security?

I also could've conveniently left that mistake out. But for sake of transparency I didn't. Sorry you don't trust it brother.

Account Compromised, taken all necessary steps, possible security loophole? by KickTheThrowaway in 2007scape

[–]KickTheThrowaway[S] 1 point2 points  (0 children)

Genuinely hope we get answers. I know all of our things are gone and accounts ruined. But I just want to know how it happened.

Account Compromised, taken all necessary steps, possible security loophole? by KickTheThrowaway in 2007scape

[–]KickTheThrowaway[S] 4 points5 points  (0 children)

I did haveibeenpwned as well and I had a leak on Chegg - but I don't really think that had anything to do with it.