Jump to content

PSA: Open OSRS TOB Plugin be careful!


Da Bazz

Recommended Posts

This was posted on april 1st, I don't think anyone has used this so far but just please be careful with plugins in general!

 

THIS IS A MESSAGE FROM WDR. JUST THOUGHT I'D SHARE WITH YOU GUYS HERE.

A security heads up (not an April Fool's joke, apologies for the unfortunate timing):

We have discovered a custom Open OSRS plugin that presents itself as a ToB Plugin, but in actuality it sets up your account to be lured (described briefly below). Rather than passing judgment on using plugins against the game rules (which would avoid this situation entirely), we want to emphasize that you should only use clients and plugins that you can trust. RuneLite and its Plugin Hub are all confirmed as safe, legal plugins. If you are going to use another client, please double check that you are getting plugins from a safe source.

We will not provide support for anyone that falls for this scam. Please be vigilant in your use of safe clients and plugins. If you are messaged by someone within WDR to try a client or a plugin that is not on default RuneLite or on RuneLite's Plugin Hub, please report it to the mods using !modmail in #bot-commands

The fake TOB Plugin will first determine the current High Risk PVP world. You are then instructed by the lurer to hop to a safe world (currently 303). Once done, the plugin will disable mouse input, turn off auto retaliate, automatically attempt to hop you to the HRPVP world, and automatically accept the warnings. Once you are on the PVP world, it will blacken your game screen and at that point you are guaranteed to lose your items. Additionally, the plugin does not have any ToB related features.

  • Like 1

The good old days

q8MGnBE.png

 

Tempest 1.png

~ By B4uz ~

 

OujZV85.gif

~ By Ace ~

Link to comment
Share on other sites

Yeah I shared this in discord a few days ago, probs shoulda made a post. 

Please expand for maximum vomit

 

12th April 2021

PeJ2vHv.png 

24th April 2021

7vl4sq5.png

12th May 2021 

x1HmkNF.png

 

 

 

spacer.png

TRWF PK Leader ¦ Legends Never Die Leader ¦ Clan Envy Warlord

Link to comment
Share on other sites

I didn't understand anything that was in the wall of text. How can a plugin make you hop to a Pvp world itself, without you picking the world?

 

dTUgUvM.gif

9ctxpJn.png.7f176442498d0f43a8e5f6bc3c4efe0f.png

 

 

Link to comment
Share on other sites

19 minutes ago, Juri said:

I didn't understand anything that was in the wall of text. How can a plugin make you hop to a Pvp world itself, without you picking the world?

 

Not that hard at all.

 

Gets the world data from here: https://api.runelite.net/runelite-1.7.3.1/worlds.js

Calls this Runelite API: https://static.runelite.net/api/runelite-api/net/runelite/api/Client.html#hopToWorld(net.runelite.api.World)

 

All done without you even clicking anything

  • Like 1

47Lv3y8.png

aBz8ar2.png

Link to comment
Share on other sites

Jesus :S

 

image.png.8c48770a0ef0f004eaca34db7d861168.png

\_________________________________________________________________________/

441546580_AoWending.png.ceff9a7bfa64e8824cb65025ee5a997c.png

/¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯\

Always underrated , never dominated

buzAajZ.png

 

 

Link to comment
Share on other sites

41 minutes ago, Brian said:

Not that hard at all.

 

Gets the world data from here: https://api.runelite.net/runelite-1.7.3.1/worlds.js

Calls this Runelite API: https://static.runelite.net/api/runelite-api/net/runelite/api/Client.html#hopToWorld(net.runelite.api.World)

 

All done without you even clicking anything

Okei, another reason why not to touch OPENOSRS 😄

dTUgUvM.gif

9ctxpJn.png.7f176442498d0f43a8e5f6bc3c4efe0f.png

 

 

Link to comment
Share on other sites

This was patched a few days ago, I spoke with WDR staff about it and also managed to find the person who had been using it. Some goldfarmers actually found it on the openrs github and started using it to lure as well and the main guy found out and got mad and deleted it so nobody who didn't already have it fully installed could even use it anymore and then an open dev fully patched it so it couldn't even work with the client anymore. 

 

Similar to what @Out said I don't feel insanely bad because especially in pvm/pvp openrs users are usually just people who want to cheat, but it sucks nonetheless those who fell for it. 

 

When I asked how much he made he said a few bill, I said 5? 10? and he said there was 87 downloads of the plugin and that was his official statement, but I haven't heard of anywhere near that many victims so don't think a ton of people fell for it. 

  • Like 3

bunnyguestsig.png.ccdc0f4d74bc49d76625f95f77126600.png

sig.png.a653e4eb38f8831b6fe065620d30b252.png

underscore.png.983945ced2a331aa1d4ec31de5913c92.png

imkhetnai.png.18510f16e5ac66a3d1aa91c007faa2de.png

lithmigos.png.bb04c57946f75d035b102720bba28d3c.png

vanuckle.png.063402cc210fcc01769876c062581050.png

daveold.png.fe31d53c54985d7c3f7687a5fea5e8c4.png

Link to comment
Share on other sites

2 hours ago, Scumpr said:

So thiisssssss is why firehands and Ice always are trying to take Never sober to TOB..... It is all making sense now!

Makes sense. #Exposed 

CASEY_PSD.pngBEST PVM.pngLUCK.pngEgt3L2U.png

 

AdkNBbg.png

 

 

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
  • Create New...