An item from the toolbox contained some obvious “malware” (used loosely since this is contained to Roblox) to maliciously get users to inject other assets that potentially hijack games.
- Obvious Messaging “Model corruption Error”
- Tells users to run arbitrary code to fix the issue which really releases a backdoor module.
- Looks like its from Roblox
- Provides a Server Error Code that some devs would fall for.
Obviously my dev and I did not fall for this which is why I am here reporting the issue now
For security purposes I will not be providing public screenshots or the infected asset, those are transmitted privately. Did not think this was enough for a security report though, so just using regular channel.
A private message is associated with this bug report