I am writing this post just to give some more context on the scale and severity of this attack. Velv (the author of the post) and I are owners of the Quero Games studio, which has operated under several different groups on Roblox, including the ones associated to this post in the private message. As mentioned in the post, yesterday I transferred ownership from my original holder, “azuidoceu”, an account with a verified Roblox checkmark on it, to three new holder accounts (“spookylabdev”, “omundoeummoinho”, “avemariadarua”), all of which were 100% owned solely by me, in the same IP and device. Today, at around 1PM (GMT-3), two of those accounts were locked (“avemariadarua” and “omundeummoinho”) and forcibly kicked from every group they owned.
Because of that, random group claiming bots took over our groups and started transferring ownership of our games to random groups they own in an attempt to steal them even if we get the group back.
I tried contacting support through my original holder “azuidoceu”, however they told me to make a ticket under the new holders (“avemariadarua” and “omundoeummoinho”). This didn’t work (I assume because the accounts were created recently) since whenever I try to make a support ticket via them, they don’t generate one, and instead open this AI chat box that ends every single conversation the same way (giving links to 2FA articles and such).
I have never done anything suspicious in any of those accounts (the only things ever done in them were buy Roblox Plus to keep my games up, verify with the same passport as every account I ever owned, and accept the group ownership transfer request).
I cannot stress how much is at stake for me currently, the groups that were compromised total to around 900K members, had over 10M funds within them, and hosted a collection of games with over 10K concurrent users before they were taken hostage by the hackers into another group (which also made them lose their “All Ages” status, drastically lowering the player count of some games by up to 90%+).
For the most notable instance, we have lost access to the group
O Filho Pródigo which had 488K members, over 8K CCU across all its games (which again, were stolen and put into another group without any permission from the legitimate owners) and 8M funds:
I cannot begin to express how stressful this is, having the risk of losing something you worked so hard for due to no fault of your own except Roblox’s own security flaws and then having to deal with AI chat bots. I was counting on that money for my college, to pay my studio of 12 different developers, and to save up to eventually move out. Ownership of all the groups caught in this should be immediately reverted to their rightful owners and any actions taken by the hackers should be immediately reversed, along with a thorough investigation on them, banning any account associated with their IP or in the hack.
