Fraudsters breed the developers of Roblox in fake interviews.
Now attackers hunt not only for rare Roblox players, but also for whole projects that the developers have owned for years and on which they earned.
Several game builders said they had lost control of their accounts, groups and projects inside Roblox after attacks through fake job offers. In some cases, support for the platform, according to the victims, did not help to return the games until journalists turned to Roblox for comment.
One such case occurred with the family of Ioannis Matsiaris. Two of his 20-year-old sons created the game The Shadow Network for five years, around which more than 12 000 participants gathered. In April, one of the brothers, Christ, was approached with a job offer and persuaded to launch the file. Instead of a working tool, a malware was on the computer.
According to Matthirist, after a few hours, the attackers captured the entire Roblox group, moved the main game to the new group they created and stole Robux. The family wrote in support of Roblox and asked for the removal of content under copyright law, but did not receive a response. Later, Matthiaris said that the attackers do not just steal items from accounts, but act as an organized group that steals games, re-publishes other people's projects and attracts unsuspecting developers to work on stolen worlds.
For many authors, Roblox has long been not entertainment, but a business. The platform allows you to create your own games, earn on in-game purchases and build around successful projects of the studio. Some games inside Roblox gather a huge audience, and their creators earn millions of dollars. Therefore, the capture of the popular project can give attackers access not only to virtual currency, but also to a ready-made audience, reputation and source of income.
After hacking, Roblox first refused the Matriciaris family to return the game, saying that he sees no signs of transferring rights to the group due to the compromise of the account. The company’s position changed when the media sent a request. Roblox said it was concerned about the specific case, and returned the game to the owner.
The company also said that the platform operates protection mechanisms, including enhanced two-stage verification and binding of sessions to a specific device. According to Roblox, such measures help against phishing and attacks with the selection of accounts, but can not completely eliminate the risk when attackers convince users to run malicious files or untested code on their devices.
Another developer, Mohamed Kaparonasa, collided with a similar scheme. He was, according to him, through Discord invited to the role of project manager and asked to install a Python package called robase, presenting it as part of the working tools. Shortly after installation, Caparoz was thrown out of the Roblox account on the computer and the phone, and about the same time it was hacked by the Discord. Then the attackers changed the two-step check and the input key, and the game and the group were transferred to another user. Notifications about the entrance from the new device or from the new place, the developer, according to him, did not receive
Another victim, Giovanne Ry, said that he was also offered the role of the project manager and asked to start the file. This time, the attackers pretended to be Cheesy Studios and claimed to be working on The Shadow Network, the same game of the Matsiarist brothers. After running the Ray file lost control of his Overcoming Overseers game.
According to Ray, the project brought about 10 000 Robux per day, collected up to 1100 simultaneous players and was its only source of income. The developer himself said that he is 15 years old and he created the game on his own. For more than 30 days, he tried to get help from Roblox support, but the project was returned only after the specialists turned to the company.
Roblox, in response to questions about cases of Caparosis and Paradise, said that the support service checks all appeals and restores property rights if they can confirm the validity of the complaint. The stories of the victims show that for the creators of games on the platform, not only hacked passwords are already becoming the main threat, but also attacks through trust, work offers and the habit of launching tools that look part of the usual development process.
Now attackers hunt not only for rare Roblox players, but also for whole projects that the developers have owned for years and on which they earned.
Several game builders said they had lost control of their accounts, groups and projects inside Roblox after attacks through fake job offers. In some cases, support for the platform, according to the victims, did not help to return the games until journalists turned to Roblox for comment.
One such case occurred with the family of Ioannis Matsiaris. Two of his 20-year-old sons created the game The Shadow Network for five years, around which more than 12 000 participants gathered. In April, one of the brothers, Christ, was approached with a job offer and persuaded to launch the file. Instead of a working tool, a malware was on the computer.
According to Matthirist, after a few hours, the attackers captured the entire Roblox group, moved the main game to the new group they created and stole Robux. The family wrote in support of Roblox and asked for the removal of content under copyright law, but did not receive a response. Later, Matthiaris said that the attackers do not just steal items from accounts, but act as an organized group that steals games, re-publishes other people's projects and attracts unsuspecting developers to work on stolen worlds.
For many authors, Roblox has long been not entertainment, but a business. The platform allows you to create your own games, earn on in-game purchases and build around successful projects of the studio. Some games inside Roblox gather a huge audience, and their creators earn millions of dollars. Therefore, the capture of the popular project can give attackers access not only to virtual currency, but also to a ready-made audience, reputation and source of income.
After hacking, Roblox first refused the Matriciaris family to return the game, saying that he sees no signs of transferring rights to the group due to the compromise of the account. The company’s position changed when the media sent a request. Roblox said it was concerned about the specific case, and returned the game to the owner.
The company also said that the platform operates protection mechanisms, including enhanced two-stage verification and binding of sessions to a specific device. According to Roblox, such measures help against phishing and attacks with the selection of accounts, but can not completely eliminate the risk when attackers convince users to run malicious files or untested code on their devices.
Another developer, Mohamed Kaparonasa, collided with a similar scheme. He was, according to him, through Discord invited to the role of project manager and asked to install a Python package called robase, presenting it as part of the working tools. Shortly after installation, Caparoz was thrown out of the Roblox account on the computer and the phone, and about the same time it was hacked by the Discord. Then the attackers changed the two-step check and the input key, and the game and the group were transferred to another user. Notifications about the entrance from the new device or from the new place, the developer, according to him, did not receive
Another victim, Giovanne Ry, said that he was also offered the role of the project manager and asked to start the file. This time, the attackers pretended to be Cheesy Studios and claimed to be working on The Shadow Network, the same game of the Matsiarist brothers. After running the Ray file lost control of his Overcoming Overseers game.
According to Ray, the project brought about 10 000 Robux per day, collected up to 1100 simultaneous players and was its only source of income. The developer himself said that he is 15 years old and he created the game on his own. For more than 30 days, he tried to get help from Roblox support, but the project was returned only after the specialists turned to the company.
Roblox, in response to questions about cases of Caparosis and Paradise, said that the support service checks all appeals and restores property rights if they can confirm the validity of the complaint. The stories of the victims show that for the creators of games on the platform, not only hacked passwords are already becoming the main threat, but also attacks through trust, work offers and the habit of launching tools that look part of the usual development process.
