Forest Global Training Partners

Cyber Risks · Cisco Talos

Attackers use Java Script URLs, API forms and more to scam users in popular online game “Roblox”

Summary: Cisco Talos documented scams targeting Roblox users, including fake free-Robux phishing pages, malicious in-experience forms, JavaScript pasted into the address bar, bookmark-based session theft, abuse of a Roblox API documentation form to force trade acceptance, HAR file requests, double-trade schemes, and malware disguised as free-Robux tools. Talos notes that nearly half of the platform's 65 million users are under 13, and that some limited Roblox items can be worth tens of thousands of real-world dollars.

Bottom line: The API method needs no malware and no fake domain: the victim pastes a trade ID into a genuine Roblox developer page and clicks 'Try it out,' which accepts a trade transferring all their items and Robux. With nearly half of 65 million users under 13, the population least able to spot these tactics is also the one holding items worth tens of thousands of dollars.

Read the original at Cisco Talos ↗

Topics
Malware
Related