[i am yoshi]

I just got hacked on a main maxed account and only runemate and me knew the password. It is the first ever time i got hacked in anything and i am 100% sure it is runemate since i am not the only one who got hacked this way.
I had a friend who told be he got cleaned after downloading runemate, i didnt believe him at first and now i learned it the hard way.

I have many accounts and only this account was cleaned even if all the others had considerable wealth, this account was the only one runemate had access to.

Bot if you want but dont keep too much money on your account, that would be my advice, i dont think runemate or its security system are trustable anymore.

You can decide weither you believe wtv bullshit the runemate staff will comment to this thread trying to protect its reputation or someone like me who doesnt give a single fuck if you believe me or not because i have absolutely nothing to win from it.

I just wished i had read something like this thread before getting hacked.

Good luck.

 

[american express]

Lol. Read any of the other threads that have claimed the same thing, and you'll quickly realise RuneMate is not to blame.

Can't be arsed replying to you, as you're just going to say we're all lying to you anyway, however I'll quote @Savior who sums it up quite nicely

I mean you can believe what you want...
if it makes you feel better to believe that runemate got hacked, instead of accepting that you were uncautious and got hacked on your own, then so be it

feel free to debug any sorts of connections going from the client to the runemate server. you'll find that the only time it's transferring your accounts login information (IF you enter them into the client) are encrypted. they're encrypted with your runemate login credentials (maybe amongst other things, idk). Technically arbiter could use the rm credentials you're sending to the server by logging into the client to decrypt your players credentials.

Let's ignore that this is already extremely unlikely, but okay, it is a minor security flaw.

Now arbiter has hundreds of thousands of player account credentials. What's he gonna do then, just pick random ones? or go after a specific runemate user? there isn't even a guarantee those credentials are valid.

Runemate sends very few information such as gp in inventory, any rings of duelings equipped, or a part of your quest list, in order to build navigation paths using runemate's web. this data isnt even mapped to a distinct player you've added to your client, just to your runemate user.

Lets assume he'd go by the accounts with the most wealth currently in the inventory by using the data of a completely different service (it's getting more and more ridiculous as you can see). Now if arbiter logged into these accounts, you would see a lot of users complaining about locked accounts due to suspicious account use, namely differences in IPs, jagex does that pretty easily.

Now i've seen some ban reports, and i've seen some "hacked" reports, but i've never seen a single "account locked" report on the forums.

Please do not feel offended, i really just want to make things clear.

TLDR: even if (and thats a big fucking if) the recent downtime involved a huge database leak, there are encryptions in place that prevent anyone from reading your account information.

Oh and this one too:

See, when I read posts like this, what I see is "I recently got into runescape cheating and got phished somewhere else but since I used Runemate just now I'm assuming it was them."

My money is on a phishing ad, but it's also possible another client stole your info.

OSRS - Hacked While using Runemate

Hacked

Do not use.

Runemate steals your password

Runemate steals your password

Do not use.

Resolved - Is it possible to get hacked?

Resolved - Got hacked after runemate crashed

I have never been hacked 15 years playing runescape. Until I used Runemate

 

[cuppajava]

You posted a thread a few months ago where you asked about other botting sites

any other good botting sites ?

My guess is you tried out some other bot/tool and they keylogged you. Or you fell for the classic phishing scam. I've said it before, but I'm always so curious to figure out how these people do get hacked. I bet I could figure it out by looking through your internet history tho tbh.

 

[chieftain]

I just got hacked on a main maxed account and only runemate and me knew the password. It is the first ever time i got hacked in anything and i am 100% sure it is runemate since i am not the only one who got hacked this way.
I had a friend who told be he got cleaned after downloading runemate, i didnt believe him at first and now i learned it the hard way.

I have many accounts and only this account was cleaned even if all the others had considerable wealth, this account was the only one runemate had access to.

Bot if you want but dont keep too much money on your account, that would be my advice, i dont think runemate or its security system are trustable anymore.

You can decide weither you believe wtv bullshit the runemate staff will comment to this thread trying to protect its reputation or someone like me who doesnt give a single fuck if you believe me or not because i have absolutely nothing to win from it.

I just wished i had read something like this thread before getting hacked.

Good luck.

Get two-factor authentication, I also don't see why RuneMate would risk their reputation and exponentially more long-term money, on hacking petty mills, does not make sense.

 

[american express]

You posted a thread a few months ago where you asked about other botting sites

any other good botting sites ?

My guess is you tried out some other bot/tool and they keylogged you. Or you fell for the classic phishing scam. I've said it before, but I'm always so curious to figure out how these people do get hacked. I bet I could figure it out by looking through your internet history tho tbh.

Good work chief, case closed!

 

[exodus4tune]

Whenever I use runemate, I always log in, enter my bank pin etc before i start the bots, I'll give minimal chance for my details to be taken, Plus 2fa on my phone and emails makes it secure.

I've never entered my login or password or bank pin via Runemates account section...Fuck that lol. I start osrs client, Log in and get it set up, then I start Runemate and fill it with bogus account info.

 

[cuppajava]

Whenever I use runemate, I always log in, enter my bank pin etc before i start the bots, I'll give minimal chance for my details to be taken, Plus 2fa on my phone and emails makes it secure.

I've never entered my login or password or bank pin via Runemates account section...Fuck that lol. I start osrs client, Log in and get it set up, then I start Runemate and fill it with bogus account info.

Yeah I used to do the same but inevitably I got lazy and just put my passwords etc. Logging in manually is definitely an option if it makes you feel safer though.

 

[the professor]

been here for a while, never been hacked must be on your end.

 

[chadd90]

Sorry ti hear that happened to you

 

[isofor isofo]

it was deffo ur end and if i were u id never make a topic like this..make urself look like a fool rofl

 

[swych]

No need for further discussion. Thread closed.