The other way that your Rapidshare Premium account can get stolen is through Rapidshare password phishing sites that are set up to look just like Rapidshare. These sites are easy to set up using a PHP script that has been written for this purpose (I have a copy of it saved so I know what it does). Any free web hosting site that supports PHP can be used for these phishing sites. I am a moderator on another forum, and I have gotten very good in spotting these phishing sites before the other users have a chance to get caught up in the scam.
I had my RS premium account stolen by someone because as a newbie, I fell victim to one of these phishing sites. I didn't realize at the time, that Rapidshare doesn't ask for your password again once you have logged into your premium account. Being naive, I entered my login & password and that's all they needed to steal my account. First they looted the 14,000 points I had on it (10,000 points has a cash value of $3.00). Then they changed the password so that I couldn't access it. Subsequently, it was used for illegal file storage (child porn). I was notified by Rapidshare that my account was terminated because of this and I had no recourse. This was before Rapidshare instituted the account protection feature that prevents your account from being changed without the security code that RS emails you when you activate the feature.
It's funny, because of this, that was the reason why I became a moderator on another forum, and I was determined that I would do my best in protecting the users from these scammers. It's a daily battle, because they keep trying and trying.
The only way to prevent these scammers from stealing your info is to have a vigilant moderator and admin force to catch these guys early. PPCWarez seems to have an interesting way to post topics by having to post a particular way.... or else!
Because of URL spoofing, we (on the other forum I belong to) also prohibited all live links (no URL tags). This way everyone knows where their destination is. Everyone has to use code tags. We also prohibited all redirect and so-called link protector sites which are primarily used to steer you to malicious sites. We instituted the HIDE tag which eliminated the need to use link protectors or redirectors to conceal your links from searchbots and non-members.
The best defense (besides the admins & mods) is YOU when it comes to protecting yourself against scams.
Alex