[bonaya2]

Hey guys.

Somehow someone managed to login into my account and changed my mail. It has two step verification so I cant change it back. Please help me! I think someone is rotting runemate or me
 
Ratting*

 

[skrall]

Is your email address somehow breached in one of the datadumps?

Have I been pwned? Check if your email has been compromised in a data breach is just one of many example sites where you van check.

 

[bonaya]

Nevermind. Someone made two step mandatory and changed my mail to a disposal mail. Panicked

 

[arbiter]

Nevermind. Someone made two step mandatory and changed my mail to a disposal mail. Panicked

Nobody on our end changed your email. You either did it yourself or you should review your security...

 

[bonaya]

As I use different passwords for my different log ins, my password on Runemate has been compromised. The person who managed to change my email only knew the password for this forum. It's not my security that failed, I'm pretty sure.

 

[arbiter]

As I use different passwords for my different log ins, my password on Runemate has been compromised. The person who managed to change my email only knew the password for this forum. It's not my security that failed, I'm pretty sure.

You're wrong.

 

[bonaya]

I just want to be sure, how am I wrong? (don't want to be a dick or something, just want to be sure I'm safe)

 

[arbiter]

Just because you use unique passwords doesn't mean you're impervious to hacking. You should practice standard breach protocol, including but not limited to scanning your whole computer, enabling two-step/two-factor verification wherever possible, and changing all passwords from a separate computer. tl;dr You were hacked, RuneMate wasn't.

 

[bonaya]

Okay thanks. I should be worried in that case Will do a scan when im home...
 
Back here. It wasn't my PC. Don't know how it happened, but it happened. It doesn't matter tho.

This is just a kind reminder for everyone not using two-step: ENABLE IT ASAP (on Runemate AND Runescape). My account + some accounts from my friends, who also did not have two-step enabled, were hacked. All items are lost. They even took the time to steal my damn cakes and worthless shit. I really don't care about the stuff, as it only was worth 10M and I keep the big money on another account not linked with Runemate..

This, again, is just a reminder for people who have Two Step not enabled. It isn't runemates problem. They offer two-step verification and you should be using it. My account got breached through RM as did all the others (not through my mail as I called my provider and they said all the logins were from my own IP, and it's just too much of a coincidence that multiple people are saying their only account linked to RM just got hacked three days ago), but due to my stupid ass not enabling two-step, it got hacked

 

[arbiter]

Okay thanks. I should be worried in that case Will do a scan when im home...
 
Back here. It wasn't my PC. Don't know how it happened, but it happened. It doesn't matter tho.

This is just a kind reminder for everyone not using two-step: ENABLE IT ASAP (on Runemate AND Runescape). My account + some accounts from my friends, who also did not have two-step enabled, were hacked. All items are lost. They even took the time to steal my damn cakes and worthless shit. I really don't care about the stuff, as it only was worth 10M and I keep the big money on another account not linked with Runemate..

This, again, is just a reminder for people who have Two Step not enabled. It isn't runemates problem. They offer two-step verification and you should be using it. My account got breached through RM as did all the others (not through my mail as I called my provider and they said all the logins were from my own IP, and it's just too much of a coincidence that multiple people are saying their only account linked to RM just got hacked three days ago), but due to my stupid ass not enabling two-step, it got hacked

Part of this message is correct. You should enable two-step. In fact it's now required to be a member of RuneMate, because I can't trust the public to be responsible. I also agree that it isn't RuneMate's problem, and we're not willing to take any flak/shade/blame for this. I can say that RuneMate is definitely not breached. If it was you'd see a lot more damage than a few low profile accounts. We'd be speaking in the hundreds of billions, not millions. Someone targeted RuneMate accounts and collected a number of credentials. The way they did it is unknown, but it's most likely by cross-referencing cracked database of other sites, of which there are many in this scene. Alternatively, malware was used. Unfortunately, some lessons have to be learned the hard way. Hopefully this experience improves affected users' security practices moving forward. Consider this a small price to pay and be glad the consequences weren't more severe. And with that I'm closing this thread. We're beating a dead horse at this point.