[yakitaki]

Heya,

I've literally installed OSRS 2 days ago, followed by RuneMate installation. Today after waking up and trying to login I've ran into something hilarious, someone has setup a 2 step authenticator on my account, I lifted it, setup my own in place and logged in. My character has not been touched or moved and my email has not been accessed (obviously different password from the game).

I've used the 3 following bots on RuneMate.

Alpha Fighter
Qve AIOFighter [Lite]
East Varrock Miner [BETA]

 

[cuppajava]

It isn't really possible for any of runemate's bots to be the culprit, as all bots are manually reviewed by staff before being approved. Also Alpha Fighter & AIOFighter are both super old bots (so there would have been more complaints) and East Varrock Miner is the guy's first bot (so I'm sure staff looked very carefully/the code is probably pretty simple).

There's really near infinite ways you could have been hacked, especially as a new player. The most often ways would be if the password was used on any other RS fansite, or any other botting site you joined, or a private server, or if you clicked an ad in facebook/twitter/twitch (most of the ads are phishing links), or if you clicked a link in an email. Or if it's a password used anywhere else you can check if the email was pwned on https://haveibeenpwned.com/

I know this likely isn't a satisfying message at all, but hopefully it helps.

 

[yakitaki]

So to rule things out, never played any RS private server, nor did I visit/join RS fansite, other botting websites. Never clicked any links in game, twitch, facebook, email etc. Either way it's strange for something like that to happen literally 2 days after downloading RS in about 10 years and using a fresh never-before used password.

 

[dark sage]

As a long time member and Bot Author, I have added and used over 20 RS accounts with RuneMate. I have never had an account get comprised in any way.

The general assumption that RuneMate is the cause of comprised accounts is understandable, especially for newer members that are unaware of the extensive security measures that are used. All account information is Encrypted and inaccessible by Staff and Authors.

The leading cause of compromised accounts, is malware on a computer. Do a security scan to ensure there is no known malware present.

Always use 2FA even on new accounts to protect your accounts. (just a general rule of thumb)

TLDR;
Long time member, multiple accounts that have never been compromised. RuneMate has extensive security measures to prevent compromised accounts.