You can come talk to me in:
http://tinychat.com/fjforum if you like.
DO NOT ASK FOR ACCOUNTS, I AM NOT ONE OF THOSE HACKERS WHO DROPS UNTRADEABLES AND TAKES THE ACCOUNTS, I SIMPLY TAKE THE TRADEABLES, THEN LOG OFF, I DO NOT TOUCH THE PASSWORD. FUCK OFF BEGGARS.
This thread is to explain what exactly happened, how it happened and when. I see a lot of rumors going around of how it did, and I would like to set things straight. Also, to all of you saying "GF NOOB REPORTED TO JAGEHX AND TEH POLEESE@!@!!!" Do you really think Jagex would do shit to the ones who fucked up nearly every single botter in the game? lol.
The hacks were all obtained through PowerBot.org, and were committed by myself and friends. PowerBot did not wan't to cause a panic among it's members so they make up some BS story about how "Arbiter" has released his scripts with a backdoor in them and had begun to hack PowerBot members (they saw my "crew" hacking all the members, and figured they can bounce all of the blame onto Arbiter so he could not be successful with his new bot).
I would like to clarify that ArbiBots, Nexus, and whatever other bots there are out there, are not the reason your accounts have been hacked, it is solely PowerBot. Secondly, do not think I am a l33t hax0r for this. I am not, and will not pretend to be. I simply found an exploit, and took advantage of it, also I coded the virus myself.
1. - PowerBot's website is hacked, and the download link is changed to a version of RSBot which downloaded and executed StealthBot v2.4 (Steals PowerBot information, NeXuS data.db files, ability to open websites on the slave computer, ability to download and execute programs, ability to spam IRC channels). I don't think the admins EVER caught onto this, because I continued to get new bots until the DNS was shut down.
Through the following weeks, the IRC server became built up to the point where I started giving out random accounts to random people for free (I think I dumped nearly 2,500 accounts total across TinyChat, FJForums, D0x, and Hacking.rs).
2. - Stealth-Network (The IRC Network, 4 servers) is shut down (DNS terminated). The bots all left, and never came back.
3. - I wrote a quick program to go through EVERY single dump that each and every bot had stolen, and compile them into an easy to read
Code:
[Username : Password : Pin]
format. After which, the resulting file was nearly 630,000 lines long (I realized something was wrong) and revamped it to remove all duplicates, and failed password decrypts. The final file had nearly 14,000 accounts (13,918 lines exactly). I encrypted the file, locked it with a password, and uploaded to my site to send to a few of my good friends. We began logging each of the accounts until the return of free trade.
4. Free trade is out, my friends and I, (ALONG WITH EVERYONE WHO RECEIVED AND SAVED ACCOUNTS FROM THE DUMPS!) began hacking going down the list (only my friends and I have this list) at random sections throughout.
4. - 581 accounts later, my own personal stash, is at about 6.43B.
5. One of my friends (Merch, who hacked about 600+ accounts) got his mule banned (GF 4.9B LOL!).
(This is not from my stash at all, I still have all 6.43B).
Some of you might be saying "Lol, I use PowerBot and I have not been hacked noob!" Well as this may be the case now, I think total, my friends and I have only covered 2000/14000 (14.2%) accounts of the list. Also, to everyone who has been hacked and is a member here, I am sorry, there really isn't much I myself can do, as it was a group effort, I can not simply take your word of "I had phats and u haxed me, giff me back plzzzz" and give you partyhats =/... let this be a lesson to you I guess =/ ..
The only way to save your account is to change your password (as StealthBot is no longer active, we will not get your new passwords). Also, let this be a lesson to you to not save your account information into a bot that is open source (such as PowerBot) because it is VERY easy to make a decryption snippet to add to a virus.
I WILL BE DOING THIS AGAIN TO POWERBOT IN THE FUTURE (WHEN THE NEW STEALTHBOT IS FINISHED!) SO IN ORDER TO PROTECT YOUR ACCOUNTS DELETE YOUR .INI FILE AND DO NOT SAVE YOUR INFO WITHIN IT.
