logo

Malware attacks strip Roblox developers of entire games

ID: c3426d17-92ea-545b-a8d6-9bf3c6dc1eee

STIX ID: report--c3426d17-92ea-545b-a8d6-9bf3c6dc1eee

Feed Name: Help Net Security

Threat Score
70/100

Date Published: 2026-06-18

Date Updated: 2026-06-18

Author: Sinisa Markovic

...
...

The report covers two related gamer-targeting campaigns: attackers use social-engineering (fake job offers and malicious Python packages) to install malware that seizes Roblox developer accounts and steals Robux and game ownership, while a separate campaign distributes malicious Wallpaper Engine packages via Steam Workshop (including DarkKomet and a modified AggregatorHost.dll) to harvest Steam credentials and drop additional payloads; both campaigns have caused real losses for developers and were active at scale with thousands of wallpaper downloads before removal.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.