Hacker Bribed 'Roblox' Insider to Access User Data

guest · May 4, 2020

Hacker Bribed 'Roblox' Insider to Access User Data
May 4, 2020
https://www.vice.com/en_us/article/...ox-insider-accessed-user-data-reset-passwords

A hacker bribed a Roblox worker to gain access to the back end customer support panel of the massively popular online video game, giving them the ability to lookup personal information on over 100 million active monthly users and grant virtual in-game currency.

With this access, the hacker could see users' email address, as well as change passwords, remove two-factor authentication from their accounts, ban users, and more, according to the hacker and screenshots of the internal system. The screenshots shared with Motherboard include the personal information of some of the most high profile users on the platform.
The hacker could have looked up information on many users, although it appears they limited their actions to a handful of accounts.
Click to expand...

Beyond just viewing user data, the hacker was able to reset passwords and change user data too, according to screenshots of the customer support panel the hacker shared with Motherboard. The hacker said they changed the password for two accounts and sold their items.

A Roblox spokesperson told Motherboard in an email, "We immediately took action to address the issue and individually notified the very small amount of customers who were impacted."
Originally the hacker told Motherboard they phished a Roblox worker to gain access to the back end customer support panel, before backtracking and claiming it was due to an issue in a piece of authentication software. There is no indication such a vulnerability existed.

Roblox characterized the hack in an email to Motherboard as a social engineering attack, which would be inline with phishing.
Click to expand...

Log in or Sign up

Hacker Bribed 'Roblox' Insider to Access User Data

guest Guest

Log in or Sign up

Hacker Bribed 'Roblox' Insider to Access User Data

guest Guest

Useful Searches