Bitcoin and Ethereum have nothing to do with the most recent high-profile theft of precious digital cash. This time, though, criminals are targeting Roblox users, taking their virtual money and other valuables. The immensely popular children’s gaming platform Roblox has become the target of a series of Chrome extensions that hide spyware because of the frightening amount of real money that changes hands on the platform.
If you use the third-party Rolimons.com cash exchange system and Roblox, you may be at risk of being hacked since at least two extensions released to the official Chrome Web Store were really fronts for a backdoor application that captures your user information.
The “SearchBlox” add-ons used to work properly, but hackers hacked them within the past month. They falsely claim to speed up user searches. One of the add-ons has been downloaded fewer than a thousand times, while the other has been used by almost 200,000 people. It seems likely that someone is using the information acquired by the secret backdoor to steal Robux from Roblox.
Both “SearchBlox” extensions are still available on the Chrome Web Store, with the major item being marked as “Featured” at the time of this writing. Even though Google removed other, similarly hacked extensions only last month, this persists.
Always use caution when installing browser add-ons from untrusted sources, and make sure to check for updates to ensure they haven’t been “injected” with any unwanted or dangerous code. As a side note, it’s worth considering Roblox’s monetization and labor difficulties before allowing your kids play the game; Minecraft is a safer pick.
Subtly charming pop culture geek. Amateur analyst. Freelance tv buff. coffee lover