Inside RuneScape's Secretive Community of Hackers

RuneScape has a secretive community of hackers. They steal your RuneScape accounts, items, display names, and more - All for profit. I spoke with a real RuneScape account hacker, he told me the insider methods that are being used to access your personal information without consent. We also talked about how you can keep your RuneScape account safe from these ploys.
►Oldschool Runescape (2007) is provided by Jagex.
You can play for free here.
www.oldschool.r...
►Join my Discord
/ discord

[@CrumbRS]

I had a blast making this video, I hope you enjoy it!

[@livewire6009]

Good job crumb

[@CrumbRS]

Thanks pal

[@acanadianeh8344]

I fell for a phishing scam recently for a fake oldschool runescape mobile link. Sucks man freal. Im dumb af too cuz i had zero account security whole bank cleaned cant say i was the richest but lost well over 100m. Real world trading fuels the underground economy. Just grind it out guys stop giving these hackers money so you can have an ags or w.e . Runescape forever has a place in my heart but there's a lot of toxic shit within the community. Beware of phishing scams i called my bank in real life to make sure nothing else was touched besides my runescape acc. I now only buy bonds because i dont trust any of my info on my acc. Its not jagexs fault but i still take precautions now. Beware of phishing scams guys!!!

[@alindsalman9629]

I'm loving these "inside runescape" videos

[@kingdavey90]

Crumb , superb video!

[@patrickblack7054]

I'm sure this man definitely has a skill cape for 99 phishing.

[@NocturnalPyro]

99 thieving?

[@karimkopra]

nope .....he is busted

[@sarahcurnayn5928]

Hahahahah damn

[@lakitu6422]

If he has access to my computer and email. Runescape would be the least of my worries

[@robbinvan1172]

if he had access to my computer and mail all he would see was porn porn porn hehe

[@DragonSlicer]

Hope you have your history cleared :P

[@gratefulbear2183]

@@DragonSlicer hope u have ur webcam covered

[@nebulouscat2210]

OwO

[@lowkeybeams5663]

JAGEX WANTS TO KNOW YOUR LOCATION

[@faio7250]

WOAH WOAH WOAH WOAH WOAH... The stronghold of security told me that to not even trust your friends with your account.

[@jacksparrow-kj2qq]

faio lmfao

[@nebulouscat2210]

"Cat"oblepas strike again 🐈

[@squigin3380]

"What are you in for?" "Stealing osrs accounts." "You monster!"

[@fritz8096]

Where there is money to be made, people shall come.

[@TheRSFelon]

Squigin I went for talking TRASH on RuneScape....

[@antoniokontos5677]

Murderer sitting in the cornor "ive met some ruthless bastards in this place you you are the worst"

[@mattthomson3134]

@@TheRSFelon lol true story 😂 hope your back on track mate

[@TheFlexorcist]

Greenlight

[@halfbean450]

"If you type your password it'll be censored, look, ***********." Ez hack

[@dylanpeterson7188]

dylanpeterson99999.

[@dylanpeterson7188]

liar!!!!!

[@dylanpeterson7188]

ha

[@thomasliljebakksund1]

Ismokedickonthelow

[@KAIIRU.]

gokusoloslowdifficulty

[@justgame5508]

As someone who knows how to code (in the same language as you C#), you begin to realise just how powerful programming languages are, especially ones such as C/C++, but also how little the general public know about programming and internet security as a whole. I don’t recommend this but i wrote a script a few months back out of curiosity that monitored an open port on my network and it’s alarming to see just how many attempts there were to access my network in the space of a day or two. Interesting video as usual.

[@FutureDreamZz]

Shit is scary now I wanna try jk

[@CristalianaIvor]

yeah, right. but what do you expect from people who hardly know what a file browser, yet alone files really are.

[@jasontruter7239]

I work on linux and there are so many ssh attempts its not even funny

[@Rexani_]

@@jasontruter7239 same, I use fail2ban. In the span of 2 weeks, 5000 ip's were banned trying to connect over ssh

[@PunishedFelix]

I know paranoid schizophrenics who used a similar technique to see if people were hacking into their computer. Was interesting seeing them share various commands to try to verify the source.

[@curseofsasuke]

I was bored with RS. I quit. I looked on KZbin for bot programs, this one dude had a ton of likes and positive comments. I used his link. I got hacked hard. 9 years of honest hard work gone. He left me 1 gp and at Lumby though. Nice guy.

[@wildyoda2931]

Red Fox 🤦🏾‍♂️💸

[@FortHYPEZONE]

Dumass

[@karimkopra]

"I was bored" u mean "suicidal" ? 9 years and now u need A BOT AFTER 9 YEARS WHY U DID`T SHARE UR ID+PAS ON FB AND RANDOM COMMENTS ALL OVER THE PLACE MUCH BETTER IDEA

[@369yew]

why 1 gp?

[@funrsguysandmore]

@@369yew insult to injury

[@SwayGamer]

Pay retribution lmao......you mean restitution

[@chodelickin]

Josue Garcia nobody is perfect

[@Hellchoseme420]

Not everyone has a high school education ☹️

[@IAmStayingAnonymous]

Too much and prayer training

[@ueehurstonsecurity8887]

maybe he really meant retribution and hes out hunting down the prosecutors to steal their RS godl

[@dertydertyejjy3876]

Nurburgrings Fastest i Think that’s exactly what he meant !! Thats the way I interpreted it when he said it🧠👀👅🖖🏿 I pictured Mate and He’ll need a few of his coder pals with him , as well as some Niceee Pkers just in case they run into some bs in game but also we all know pkers get Gains IRL too ! He’ll just blackmail them into helping by saying he’ll hack them otherwise. SO all in all the facts are and/or if you would .... a theory. its “ THE HACKER AND THE FELLOWSHIP OF THE RETRIBUTION ! “

[@Osmo22]

I was a phishing victim. A Facebook ad for OSRS Mobile came up. I hadn’t checked the page to see if it was legit. I also hadn’t played in a while, so I was unfamiliar with the warning signs. I put in my username and password. It also asked me for my pin. I thought it was weird, because I didn’t have a pin, and I didn’t remember being asked before. Then it redirected me to the actual site. I tried multiple times to get the download for OSRS (this was on my phone, too), but after failing a few times, I read the comments of the ad. I was haunted to see that everyone was saying it was phishing, and I immediately knew I was the next casualty. I quickly changed my email password, my runescape password, and, thankfully, I had two factor already set up on my phone, and not my email. I also put on a bank pin, a different one from the one I typed in on the phishing site. My account wasn’t very wealthy, so I might have been fine anyway, but I was relieved to find no damage done. I was lucky. I didn’t dodge a bullet, I dodged a fucking predator missile, but I’m sure there are those less fortunate than me. Let my story, and many others, be a warning. Keep a keen, watchful eye on every link, especially for runescape. These people are ruthless and will stop at nothing. Thank you for making this video, I’m sure you could warn more people than I ever could. Instant subscribe.

[@jamiecranton]

Oak dice "Now im not saying mr crumb is working with runescape hackers but we can speculate he is by showing a fake runescape url in his video, ya never know guys."

[@largepoodle6036]

Fun fact: File binding is what infected so many PC's during the Limewire era. Exe's binded to mp3's. Lol.

[@dosidicusgigas1376]

Everyones computer was straight up fucked during the limewire days 🤣

[@JohnnyFPV]

Explain the reasoning behind deleting the x staking video

[@tikshot6385]

I would like to know aswell

[@but-why.]

We demand answers

[@jnunnery94]

Save your breath he's clearly guilty 😂

[@samx1230]

We want answers

[@jefftparker]

Because he owns the video....you don't.

[@moneym3]

Using someone else’s program to get kids for their rsgp doesn’t make you a hacker 💀💀💀🤦🏽‍♂️

[@dosidicusgigas1376]

LOL fkin owned.

[@SimpleFlips]

Surprised anyone chose to talk about this lol

[@CrumbRS]

Me too

[@Flipybitz]

dad? get back to smb dont ever watch runescape again!

[@senorak1644]

Dad stream osrs @simpleflips

[@goglin650]

Simp are you planning on streaming rs sometime

[@dodge2430]

Hes avoiding me though lol

[@NocturnalPyro]

I fell for a phishing link once, luckily I realized and I changed my password immediatly only lost the 1m I had in my inv since he couldn’t access my bank because of my pin.

[@quintenboosje2437]

secretly, this guy is one of the hackers, and this "youtube"-thing is just a really good cover.

[@hamiltoncannagar636]

Quinten Boosje dun dun dunnnnn

[@kynanverwimp847]

Word documents arent usually spoofed, they contain macros that can execute programs on your machine. Theyre an actual feature

[@Shadowmaxim]

I used to be a control freak in my house and whenever my friends would come over i would keylog all my computers so when we'd lan, i could see ALL their passwords. I was super interested in their lives, so i would read msn chatlogs, their emails, school grades, and even runescape passwords. I was such an immature kid, that i had a jealous sense over their social lives and wanted to better understand them, even though i was socially shy and too afraid to really make an effort to be more of their friend. Well, one time one of them pissed me off i just hacked their rs character (we werent high level at all at this point in time) and well, they lost a bit of trust in playing at my house. Later on, one of my friends got really into exploiting, and cheating in games, so i felt threatened a bit and didnt give out much to him, since i knew his powerlevel. I still felt safe when he came over because i had a lot of his passwords, but the thing is, my rs account was very high level now compared to his, so incase a hacker war broke out, i would lose the most. Now fast forward, he moves out, i become kind of bored with runescape and lower my guard. He comes back to my town and we hang out like the good ol days. Actually, i am so desperate for social interaction i invite him over (wht tf was i this desperate for human connection?) I promise him ill let him play on my account if he comes over, supervised, and he does. Whelp you know what happens next, i become so dumb and dont notice he is trying to trade my rares to his mule, i am oblivious whats happening, he tells me oh its just my other account, so i go to the bathroom, come back hes ready to leave and we farewell. I login and my rares are gone xD and it becomes the most depressed summer ive ever been in life. Nothing else matters. Its around this time i am 16, teenage hormones are suicidal for me. I am so depressed i start to fantasize hope to make me sane. There has to be a way to get my shit back, but alas he even lost it. Apparently he got hacked too and lost my shit, so now we are both kind of RIP but we bond over this. Anyways a new friend begins to play RS and matches my total level. I like this new friend, he is smart, extroverted, i dont need my introvert hacker friend no more. Time goes by, i come back to runescape coz he says its so ez to make gold cuz of godwars dungeon. Yayy hope restored! Social life somewhat restores. I train daily after school, time flies by, i make MORE than i lost. Fast forward to 2009, i sniped my first white phat from the ge!! Wow. This is the peak of my performance. I get lazy again. Uh oh. My guard is down. Fast forward to 2011. I get so bored of RS i let my newer newer friend borrow my white phat (he wuz friends with me before that, but i rarely even cared) and hes kinda a nub, but hes very friendly and trustworthy. I was wrong, he gave it to his friend, and that friend told us it was hacked. Who knows. Game is so boring at this point i didnt like to play it, and gave my account to these friends plenty of times before that. FF to 2013. My email has been hacked! I know exactly who done it. My intuition says hacker friend. I log into his account, because years ago i keylogged it. Yep! He has my shit. I get it back, but only the gold. All my items have been deleted! So sad, even my pets. But he didnt get anything now. He now thinks the original acc owner recovered the account (it wasnt his real one, even tho i knew the pw). So now i am stuck with my original high lvl acc, with no items, no white phat, just the 500m gold. Well im so bored of rs at this point, i just make a new one to xfar the gold and not play on mine anymore. He can hack it back all he wants, it will have nothing xD. GG runescape, but my bad for having guessable hotmail recovery questions? I still am not surr how he knew them, but kids, make sure nobody can solve your email recov wuestionz, coz once they have it, they have ANY game you might play. Nobody will read this, but please like it so i know at least one soul out there listened to my story

[@Tom-jk1wn]

Shadowmaxim very interesting story

[@slitheryboy69]

I actually read all of it

[@yomama3926]

Still a kid

[@CHAOS9H]

I read the whole thing and i actually think you where melodramatic. No offense

[@joshurlay]

Shadowmaxim I read the whole thing and if you ever play again you should add me! I'm Skelly47. When I was a kid I thought my life was over when I got PKed with 1k in my inventory. Nowadays I give away too much money to strangers.

[@jacoby6000]

I know this is late, but a good rule of thumb for setting up 2 factor authentication is: Something you KNOW (your password) Something you physically have (your phone) Any time you add another layer (like 3 factor) you should add an entirely new *type* of authentication. A 3rd type would be: Something you ARE (biometrics)

[@CristalianaIvor]

"dont trust skype" yeah, when I was like 13 I clicked on a skype link that said something like "hey I saw your picture here blablabla" and it started texting that message to all of my contacts. luckyly my dad was one of them and removed the virus

[@reverendneko8512]

Fell victim to a phishing scam myself just recently, very convincing stuff to someone like me who wasn't paying close attention or thinking clearly

[@MLGProTips]

Hi Crumb, Fishy (the notorious RS gambler), said that he would probably be willing to do an interview with you. I asked him on his stream which is "fishycam" on twitch. He also has links to his Instagram and youtube on his twitch page for contact. If you're not aware, he is one of the most famous RS gamblers/RWTers/3rd party dicing site owners of all time and would give an incredibly interesting interview. Please upvote so that Crumb can see this and contact him :)

[@rocktleague6295]

I once got dced and logged in saw another ip, i immediately banked my items. Then dced again and i got hacked i recovered my account on another laptop other adress and hacker left empty handed. On top of that i tracked his ip coming from massachusetts and passed it down to jagex

[@Andy_k9k]

Recovering was always easiest way to hack an account

[@nickslidel]

My favourite noob scam used to be walk around saying; Me: “********” Me: “wow RS auto filters your password haha” Then waiting for some really random word to appear in someone’s sentence Random noob: I love mushrooms1 they’re my favourite food

[@frappexd_2959]

Haha i m not going to lie i fell for that back in the day lmao

[@samieosrs7712]

When I was 11 that’s how I was hacked 😭😭😭 actually they messaged me saying if I put my password backwards then it shows as stars. I was heartbroken.

[@nickp1979]

Someone almost got me with a similar scam, I got invited to a clan that supposedly had 1k+ players. I was sent to discord, then to a fake rs website to post my application on their forum. The website looked legit but it had a bunch of numbers at the end of the address and the online player count was off too. When I typed the application out it asked me to login. I was suspicious but I still typed out my info. Then it asked for my bank pin and I freaked out because the real website wouldn’t have asked for pin. So I typed the wrong one on purpose and it accepted then told then told me to accept something that would pop up on my screen. I changed my info so fast, but I’m still worried I’m log in one day and everything’s gonna be gone.

[@cash2436]

The fact people would rather buy stolen accounts than just grind it for free themselves is baffling. The entire point of Runescape or any RPG is the grind.

[@godssons6979]

i had someone who used to go by the user name "Gilded Gods" do this to me back in 2010 or 2009 or so. they stole over 200m from my main and once i had finally gotten my account back all of my important items, valuables, and even my untradables were all gone, and it made me so pissed off after i talked to jagex mods on forums about it, and after i reported multiple times off all of my alts nothing ever happened to him. he was an irl trader and everything as clearly was visable by the fact that he had 3 of all p hats except blue and white at the time and everything... he literally showed me his riches then sent me a link and i went to it and tried to log in because of what he told me and then boom i was fucked... keep in mind guys i was like 10 back then so that just killed it for me and i never logged back in since tbh.... its mad annoying because i know nothing will ever happen to that dick head lmfao

[@frankfarfan9703]

you were 10 with 200m+ fucking props to you

[@Michael_Unce]

why did you delete the xers video

[@baker5658]

I think we both know why

[@cl8326]

Id love to imagine he doesnt like getting swatted bro lol

[@whytho2301]

Xers video? wut

[@cl8326]

Why tho he had a vid last week about being xing,using a staking accs a little lower level to stake like 20m vs 30m since it had lower stats,people ran accounts that botted like 30 of em at once made thousands monthly,couple screen shots in the vid were like a dude saying dont come at me bro (anyone ,not crumbs) ill have you swatted,family's life fucked up etc,just a really sketchy business

[@whytho2301]

Anthony Jefferson fuck that wouldve been an interesting watch. Understandable he deleted it though. Thanks for telling me!

[@timurtheterrible4062]

My man had full access to computers that were being used for banking, messaging, and a whole host of other sensitive things. And then of all the things he could do, he stole Runescape accounts.

[@kuivia]

it makes me sad that people would go out of their way to ruin things for other people..

[@TheRedMiners]

you can put the 2-factor authentication on your mobile phone but you can still disable the authenticator through your e-mail that is linked to your rs account. so if a hacker ratted someone they can still disable the authenticator and won't need access to your phone.

[@Crystal_Bull]

That's why you 2-factor authenticate your e-mail too. Usually those have harder bypasses like a recovery e-mail (i.e. only you should never use) or a text to your phone.

[@troit1550]

2 step auth on email that requires phone as well

[@squirlkingSUCKS]

Crumb, when you are finished with this series, can we get a castle wars guide video? everywhere i look there's no video explaining everything about it. Thanks!

[@PP-gr9oh]

are you serious a castle wars guide in 2018 u must be bad

[@squirlkingSUCKS]

im missing your logic. Castle wars is a minigame that some people do not know alot about. How does that make anyone bad? its not like its a how to kill cows guide

[@harborcree]

V driipz idiot

[@kodakenta]

Just get 94+ Magic, do Desert Treasure and ice barrage everybody to death. It really isn't that hard.

[@Jaceftp]

94 magic will take months unless you no life play.

[@MFShowtime]

It’s crazy that runeScape really had the most violent type of hackers in any mmorpg in history lol. I would of expected a game like WoW to have that😭

[@yam5136]

inb4 crumb was just being baited and has lost his bank rn

[@jacksparrow-kj2qq]

why do I get runescape ads when I'm watching runescape vids

[@hamiltoncannagar636]

jack sparrow I think you answered your own question

[@icarryxbl7189]

I recently got back into runescape and i love watching these videos and learning stuff like this. Good Video

[@BrandonClappr]

This is why I don’t talk to runescape people or join your discord and stuff. Lol

[@Peertje304]

It's so depressing like I just wanna play my fun little game and these people ruin it for everyone

[@Sniper200g]

So if they sent a file over discord would it auto download into your pc or would you actually have to save that picture

[@OhYouWannaTalkToMeNow]

Discord doesn't automatically save pictures so no

[@somenerdsomewhere5914]

Smh just befriend a mod if u wanna hack accounts like ROT

[@SelfSufishin]

Well, there goes my money maker. Thanks

[@charmolettafranquestafiestayam]

@3:13 wow all these years and I still recognize that place from those icons.

[@razer0072073]

Two step verification and they can't get into your account even if they have your password because they would psychically need your phone

[@Owlsnerf]

Mas A apparently disabling the authentication is pretty easy

[@prod.gothamcityy1591]

Yeah it can Be done

[@d2an3i]

To disable authenticator all you have to do is go to runescape web page and log in to your (doesnt require mobile authenticator) from there go to settings and disable authenticator.. it will send link to your email you just press on the link and bam youre set

[@dawidkiller]

2FA your mail account and its impenetrable at least in theory

[@aleksrs6260]

Do not be so naive, if they have access to your computer by various methods - you are not safe to being stolen of your beloved account. Always be cautious my friend.

[@gabrielemalatesta8978]

I started playing old school again after three years, for some reason my two-step authenticator was taken off. I totally forgot that Jagex had that feature in the game. So I played and log on the next day to find like my measly 6m gone. What a bummer lol.

[@lemon0phat]

Someone is forced to pay restitution for a crime, not retribution. Just a friendly FYI.

[@Ikine557]

I remember that runehq hack. The website got a reputation as being unsafe because of it, I still try to use it as little as possible.

[@tjtomax]

Super helpful honestly for people not well versed in what people and programs are capable of. Thank you for the videos mate. Keep em coming so long as you can.

[@CrumbRS]

Thanks I'm glad to hear!

[@chrisj403]

If you authenticate your account, it's nearly impossible to get hacked. Authentication has you scan a barcode with your phone from the RuneScape website, it then gives you a password that changes every minute. This means they would need access to your phone to get to your RuneScape account.

[@tronkles3633]

I fell for that phising scam a year ago. I was browsing through Twitch and saw that "Jagex"was live streaming. A Q and A was being broadcasted and it had over 3,000 viewers. Then, I looked in the description and it mentioned something about double XP weekend, (which was coming relatively soon at the time) So, I clicked it and put my stuff in. Fortunately, I put in the wrong password to my RS account and I had 2 step authentication. But the hacker got access to my email and a few other things like Battle(dot)net and Roblox. Turns out, some scumbag literally went through the trouble and played an old VOD of a Jagex Q and A AND had a veiwbot. To this day, I'm still scared that the hacker could access my personal info and ruin my life. I have a different password for everything and have 2 step Authentication methods. But still. Every day I fear for the worst. And it really sucks :(

[@longdongsilver6298]

Buy a new pc and change all your passwords n shit on that new pc

[@ItsAlundra]

I've seen Runefake posted on the /r/runescape subreddit, when it was there he was using votebots to downvote people who was skeptical about the website he was linking. He also used multiple hour old accounts to say shit like "Great job, ty for this, good read" to try and make it look legitimate. Very toxic person too with his responses. Looking it up, the account that was used for that post was suspended.

[@Hakuonu]

funny this is exactly the stuff that was going on way back in 2007-2010 era on xbox live. people def used aim to do exactly like you said this brought back so many flashbacks... rip old pc xD

[@19justinowen]

Again a great addition to the series much love and keep up the great work love watching these videos crumb!

[@CrumbRS]

Thanks Justin (:

[@PG-ku8gr]

Back in 2008 I got phished and I ended up befriending the guy who did it and he let me in on his gig and actually gave me the login to his phishing website and he had hundreds of accounts on the list, it was crazy and I’m sure that doesn’t happen often

[@_buffer]

Quick note.. Saving the DOM of RuneScapes website will make your website highly unfunctional & buggy if you do not get the JavaScript with it. Which IS possible, but harder than just right click & save.

[@tweakturnup8847]

i was hacked for 80b about 5 years ago. i managed to get a contact email for jagex and they refused to even attempt to track the gold. all i asked for was to have them banned. instead they gave me 25 spins on the wheel of bullshit.

[@MrRetroDev]

The biggest problem with Runescape and Jagex is the incredibly lacking security. One of my accounts was hacked after I turned off second factor app authentication for a couple of days while I switched phones. I got back to my account, noticed I had been banned and neither my email address or password had been changed. My email address is somewhat rare and my password is randomly generated and incredibly secure, it would take years to brute force it. I have never falled for a phishing scam and I really don't think it was purely down to a bot getting lucky with guessing my email and password. I think Jagex has some serious problems with their backend security that people are exploiting and Jagex are ignoring it while hiding behind second factor. Second factor should be an optional thing to make your account more secure, not _be_ the thing to make it secure, that's not it's purpose. When I got my account unbanned they tried to pin the blame on me for disabling second factor auth.

[@WaffieOwnd]

Keep these vids up man! I've been RAT'ed when I was a kid, I was forced to delete my YT acc with 1k subs at the time, made PK vids etc, (~12 years ago), quite sad to be honest. But still this world of X'ing, botting, hacking/phishing always appealed to me. It's like fantasizing of going down the criminal road IRL; and just as irl you'll most likely stay a puppet. You've an unique position atm with these ppl contacting you, it'd be interestering to see if you could go 'deeper' and talk to the engineers or smt.

[@kentonmayhew7210]

You always get me with the "love peace and chicken grease" bro been saying that for years...love it...hard sub after i heard you say that haha..great vids dude keep it up..honestly all this kinda makes me not want to play the game anymore...hell I dont even have public on anymore cause of how toxic ppl are for no reason

[@casperborn8474]

Hacking in itself isn't an illegal offence. Black Hat / Malicious hacking is. There are plenty of legal applications of hacking, e.g. penetrations testing.

[@xtheslipknotmaggotx]

I fell once in 2009 for the classic "My father is a jmod" arround 4 months after creating my account. Remember losing my full rune + 3 gold ores in my inv before getting my account back

[@nolifeorname5731]

FYI those 'droppers' are mostly called "staged payloads", you download a stage 1 payload and then it gets you the next stage(s) from a remote server.

[@meml00rd]

You're hyping too much regarding extension spoofing. It's completely fine to recieve media type files, but as long as you verify that it is infact an image and you verify that you're opening the image in a imagereader. There are a few ways to spoof an extension, there are a few formats which do not look like an exe and saids something along the lines of screensaver, but mostly it's simply using a certain unicode character which essentially flips everything after it backwards, meaning if you write 'picsexe[UNICODE CHARACTER]pgj.exe' the string will look like 'picsexexe.jpg'. Best defense is to enable 'Show file extension' and to always open the media in the correct programs, meaning right-click->open with.

[@AleK0451]

why not just scan the file in an antivirus, most of them come with an option under the right click

[@Al.Kapwn420]

That's a 10/10 pasta at 2:42

[@wykia]

i love hacking runescape after thoes motherfuckers banned my accounts for no reason.here r all of them,deadsun11223,gamefrak57,karibola,yogosun.cheke them in high score list.i have the 3 most famous hacks that work with the upgrades they made so far.the item duplicatore,stat editore,password scammer.send me your username and password to [e-mail] and wat u want me to do. trust me i really want to get back at thoes assholes. so if u want to help out i would be happy to meet you and scamm 4 u and hack, srry i cant give out the secret because it wont be cool if i do then every one will be hacking runescape.and 4 a secound if u think i am a scammer.ahhahahahahahahahahahhahahahahahah you can sit behind you computer screen pick ur ass and get owend. noob but if u trust me you will be pking greaterdemons in lvl 50 wildy without losing any hp. not exactly but something like that will happen. seeya noobs.

[@OnBrandRP]

but wouldnt that mean you just hacking me?

[@mcmurkington]

ive loggged into one of the fake websites before. they even asked for your bank pin, luckily i realized it, switched my password and my pin immediatley

[@alfredenglund]

i used to do a little bit of hacking but nothing this extreme, all i can say is dont be stupid, have a good virus software and just dont download random shit that peps send to you, and ignore people that want you to "help" them with something, most of the time they will just bite u at any given time

[@EvilNeonETC]

It's almost as if Jagex knew their game was super easy to hack into, so they warn everyone instead of making solutions...

[@benjohnson1372]

Big Bob: "Hey! What you in for?!" Hacker: "hacking RuneScape accounts" Big Bob: Hands the soap over. "This is yours".

[@SynysterSnipers]

Easiest way to gain access to infinite accounts at will - Mod Infinity. Still have PayPal logs with his IRL name linked to the account...

[@ericcanton5789]

My account was just hacked today :( I have no idea how. I had 2 step set up and I never shared any info with anyone ever nor did I ever log in or click on any links, I just played it on mobile. Now I’ve lost everything, he took everything out of my bank worth any value and all my gp, now I have nothing, no items and no gp, lost over 100m in gp and items.

[@rollingbird3]

I feel like your series is like gang land from history channel. Soon you're gonna have distorted voice clips lol

[@J-Nolan]

@crumb wasn’t it you that made the video over the duel arena xing or was that someone else? I wanted to watch it but now I can’t find the video

[@codkungfu]

Man someone hacked my account and got me permed banned and I can’t get ahold of RuneScape employees. Fml man

[@2pacisdagoat213]

Same soon

[@Helloim_anthony]

What ended up happening?

[@codkungfu]

@@Helloim_anthony I actually managed to get my account back from support. Now I don’t even play

[@codkungfu]

@@2pacisdagoat213 hit up support and get your account back!!

[@q7b663]

Rats (remote administrative tools) aren’t all automatically malicious, some are used for tech support and managing clients for whatever.

[@dosidicusgigas1376]

The best way to outsmart hackers is simply to hack yourself so there's nothing left for them

[@kursna]

Pay thousands in retributions? I feel bad for whoever feels their wrath

[@PBMS123]

0:18 you definitely mean RESTITUTION, and not RETRIBUTION.

[@123HunterHead]

I remember when Runescape was simple. The grand exchange didn't exist. full stop. I felt like I probably played for about a year before it was introduced. I wept. I can't remember why, but I think I just loved the thrill of bartering and trading with players. Grand exchange was a kill joy. Like the world relied on us to keep afloat. IT ALSO Promoted your own growth. Since you couldn't just go buy rune. Neither buy adamant. Hell even mithril and steel was hard to come by. You had to go mine the ore and make it if you wanted it. Items had more value than money. Well my rant has ended.

[@nateball4787]

me: yo how did you end up here in jail jacob: i hack fucking runescape accounts

[@p1nkf1oyd13]

Ayyy shoutout to Hack Forums, featured in this video :)

[@JRPGrinder]

Yo, you should put "Dwarven Domain" on as a background track in your videos. It's perfectly sinister.

[@binkiebarnes]

Someone did that fake forum thing recently on twitch. They impersonated Woox saying he was quitting and to see why they needed to login to the forum in order to read why. They had over 3k viewers and was on top of the directory at the time.

[@ohaihello]

TIL I fell for a basic hacker attack that you mentioned in passing. Nice.

[@ramp622]

You sound like one of those “top 10 real scary encounters” guys. Like I swear I’ve heard u do those videos on a different channel or something.

[@CrumbRS]

Just this channel :)

[@frosty295]

Have two factor authentication, only use the official website and don't use a insecure OS like Windows because that's a easy target for hackers as he has shown

[@elithomas7173]

why'd you use a picture of sparc mac's bank? why didn't you show us one of the accounts he hacked and block out the name

[@ballerina2rockerchik]

So I follow RuneScape on Facebook for updates and whatnot, Someone pretending to be RuneScape paid Facebook for an ad with a link for RuneScape mobile beta which was just a phishing site, because I follow RuneScape and interact with RuneScape related content this ad was TARGETED to me. I almost fell for it because it looked so much like RuneScapes official posts. I’m glad I didn’t and decided to have a look at the comments. I reported it but I have no idea if that actually helped at all. I think it’s really scummy of Facebook to take money from hackers to advertise their phishing scams.

[@wingsofdivorce7606]

Sick sick video dude i really love to see you taking all this time and effort to bring us such interesting information, ps you gained new sub

[@zuki5904]

Idk if I agree with posting this. I understand it’s good to inform people, but imagine how many people watched this and decided to become hackers. When you give specific details and explain how easy it really is, and how they lure people in, it just seems like this will add to the already massive problem with hackers. Just my two cents tho.

[@A_G_4]

Don't hack me hackers

[@peytonhorn2833]

Nice tbow broski 🤘

[@jordy7145]

A_G_4 Runescape donate me some gp bro

[@TheSandurz20]

I used to be a part of the rs black market. If you want some insight on how the hacking community you frequent became so reliant on runescape, I would be happy to tell you about it.

[@kynanverwimp847]

Hiding malware in Microsoft word documents isn't spoofing And you cannot hide malware in images, you can just try to make them look like images but they will only work when the user isn't paying attention.

[@Bains12300]

Yeah, I was a little confused when they stated that it was some form of extension Spoofing. I'd think on the image side of things they'd be using some form of payload encoding LSB steganography. That could then be used to supply the dropper which in turn supplies the payload in terms of the RAT. These are very simple forms of attacks used though, simply praying on the lack of user/player awareness.

[@4GamerSNeXiZ]

Creating a phising site is really easy. I did that in the game called "Habbo Hotel" back in the days where I was 9-10 (!) years old. Well still got perma banned and the users got their stuff back, but just saying, that even a child can do that.

[@VictorS662]

i once fell for one of those phishing websites, i entered my username and password, clicked Login, and as soon as the next mage asked me for my bank pin, in my head i instantly shouted "FUCK!", and rushed to runescapes website and changed my password in less than 1min lmfao.

[@Cerebrums]

Stored passwords? One moment as I purge.

[@mrnarason]

Had authentication on mobile and still got hacked. Didn't play much, no friendlist, no clue how they found me. Lost 30m, waste of time, really. Professional hackers are like irl scammers, they need to get a life. They wouldn't like if someone else can into their house and stole all their shit. Idk also why hacking is so prevalent in rs community, Jagex never fixes the problems besides saying, "just don't get hacked".

[@clothesclothes777]

Do you try to verify what people tell you just wondering, there's a lot of wannabes around in that community

[@joshalberts7043]

holy shit i think i might have fallen for the "leaving runescape stream" scam.. rip i hope they have fun on my ironman lol.

[@Frank-gv6fs]

Man Crumb you doing some serious journalism. Some other RS journalists circle jerk reddit and repost updates but this shit is good can tell you put effort into your work! Keep up it brotha and stay safe.