Storm Client Developer Banned from Major RuneScape Marketplaces

In a significant development following the discovery of malware in Storm Client's Allure plugins, the developer known as "Burak" has been permanently banned from Sythe, one of the largest RuneScape trading and services marketplaces.

What Led to the Ban

After security researchers decompiled the Allure plugin JAR files and discovered credential-stealing code, evidence was presented to marketplace administrators. The code clearly showed:

• Active collection of usernames and passwords
• Session token theft for account hijacking
• Discord credential harvesting
• Data exfiltration to remote servers every 30 seconds

Community Response

The RuneScape community reacted swiftly once the decompiled source code was made public. Multiple users came forward reporting suspicious account activity after using Allure plugins, including:

• Unauthorized login attempts from foreign IP addresses
• Missing items and gold from banks
• Compromised Discord accounts linked to their gaming profiles

Developer's Response

When initially confronted with the evidence, Burak claimed the findings were "a complete fabrication" and attempted to discredit the security research. However, the decompiled source code speaks for itself - the malicious functionality is clearly present and documented.

What This Means for Users

If you've ever used Storm Client or Allure plugins, you should:

1. Change your RuneScape password immediately via the official Jagex website
2. Enable two-factor authentication (authenticator)
3. Check your account for suspicious activity
4. Uninstall Storm Client completely
5. Run a full antivirus scan

Moving Forward

This incident highlights the importance of using trusted, open-source clients like RuneLite. When client code is publicly available and auditable, malicious code like this can't hide. Always verify the safety of third-party software before using it with your gaming accounts.