Storm Client Security News & Updates

The Storm Client developer Burak has been permanently banned from major RuneScape marketplaces including Sythe and other OSRS trading platforms. This ban was a direct result of the security violations and credential theft discovered in the Allure plugins. The marketplace administrators took immediate action to protect their users from the malicious software.

Security researchers have identified new malware variants targeting Old School RuneScape players. These malicious plugins use similar techniques to Storm Client's Allure plugins, including credential theft and data exfiltration. Players are advised to use only verified, safe clients like RuneLite.

Jagex has issued an official warning about the risks of using unverified third-party clients. While they don't specifically name Storm Client, the warning comes in the wake of the malware discoveries. Jagex recommends using only officially approved clients and being cautious with any third-party software.

An independent security audit of RuneLite has been completed, confirming that the popular OSRS client remains completely safe and free of malicious code. The audit was conducted in response to concerns raised by the Storm Client malware discoveries.

The OSRS community has reported over 1000 compromised accounts linked to Storm Client usage. These accounts show signs of credential theft, including missing items, unauthorized trades, and suspicious login activity. The scale of the compromise highlights the severity of the Storm Client security issues.

The Storm Client website has quietly removed several security-related claims, including anti-ban protection promises, following the discovery of malicious code in their Allure plugins. This suggests awareness of the security issues within the development team.