BleepingComputer.com: A question about runescape...

(I'm not sure if this is the correct area for this so if it's not please move it.)

This is probably a longshot but some peace of mind would be nice.

Anyway, I play Runescape, which to those that don't know is a java browser game and several weeks ago I unfortunately entered my password onto a phishing website (a replica of the official website). My password was changed, but I was able to recover it and change my password to something different.

But today, it happened again. My account was accessed and my password was changed, but I could recover it again. Thanks to the good people here, it seems the rest of my computer is clean and secure, and I was wondering if anybody had any idea how it could have happened and maybe a way to stop it.

Its possible that when you had it done the first time they got ahold of your contact email address and cloned your email, in which case they can reset your password as many times as you can-I would recomend going into runescape, and putting in a different contact email and changing your security questions.

Thank you for your input, sir. If the email has been cloned, is it still safe to use? it's my primary email, and I would prefer not to have to switch.

If that is the case, then there is a very real chance that whoever cloned your email is either receiving any email you get and can access any account you have setup with that email. I would switch email clients as well, most email clients these days are free, little bit of a hassle transfering contacts and sending them all your new email, but in the end security is very important.

Well, that's unfortunate. It seems this may go deeper than i thought.

I have decided to close the email account, but will they still have access to any of the emails that were sent, and emails that may be sent in the future?

Thank you for all your help, by the way.

This post has been edited by joebsts: 21 May 2011 - 05:42 PM

Just for that email account, and only the ones that were sent/received from the time they started the clone, and thats of course, assuming they did clone it, its possible they have another way into your runescape account, its not the most secure out there so its possible that they havent cloned it, however, I would still assume the worst nad change email accounts.

Unfortunately, I have no way of knowing it's secure unless it happens again, so I'm trying to cover as many bases as I possibly can. I've done just about everything I can think of to make sure I'm secure, so thank you once again for all of your assistance.

Not a problem, best of luck, and if theres anything else we can help you with feel free to ask.