This attack scenario involves ROBLOX, a highly popular massively multiplayer game with more than 178 million registered accounts and more than 12 million monthly active users. We’re referring to Discord, a new-generation chat platform that gamers frequently use, with a user base of more than 45 million registered members. In the particular scenario we are describing in this blog post, however, it is not the game that is being abused by the cybercriminals, but rather one of the communication tools used by the game players. And usually, for that purpose the game itself is abused. Usually the aim is simple: to steal personal information and monetize it.
We’ve reported many similar incidents in the past, from fake game apps to real-money laundering through online game currencies. Cybercriminals targeting gamers are nothing new.