We have been notified of a scam in which malicious actors are impersonating investors, influencers, collaborators, and other creators to persuade them onto a video conference call for a conversation.
Once the creator joins the video call, the malicious actors will try to convince the creator to allow remote control of their computer via the platform’s remote control features. This then allows malicious actors to run a script that steals your Roblox account information, enabling them to take control of your account. Once they’ve taken control of your account, they perform actions that violate the Terms of Use to force an account deletion or takedown.
You can also visit our Help Center for tips on how to keep your account safe. If your account has been compromised, please contact Roblox Support immediately.
This is very scary, im happy Roblox has notified us about it.
But on the other hand, why would you ever give someone you don’t know access to your computer or remote control over it
As a general rule of thumb, never allow someone to have remote control over your machine unless it’s someone you personally trust. And even then, you still shouldn’t allow it unless there’s a very compelling reason to do so, because more often than not a screenshare suffices.
this discusses real-life cases of such an incident occurring, although it mentions an unspecified Zoom RCE rather than social engineering of a legitimate remote control tool
It should be very common knowledge to not let random people control your PC, its a common attack vector for a mountain of different computer-related scams.
I think people should probably be more skeptical when it comes to stuff like this. You should never ever give someone you don’t know access to your computer, which has all of your information! Don’t trust anyone, not even yourself…
They use a social engineering trick to get you to give access, they probably say something like “can you share your screen” and then request access to remote desktop and people click on it thinking it’s for screen sharing. On some softwares the buttons for both of these can look very similar. Once they get access they can probably immediately run a script using a macro for windows run/powershell.
Too many Captain Obvious’s in the replies, obviously nobody would knowingly give access to their pc.
genuinely got a letter(in the physical mail) about my home’s “extended warranty”(1940s house btw).
The lengths people are going to just to cause problems for generally completely innocent people is insane, and going after random roblox accounts is even more insane, since it’s majorly children, and most accounts are going to barely have any value
If nobody was falling for these, then why would they bother making these alerts? Yes, it should be common sense, but that’s not the reality we live in. I’m sure the people who were tricked also thought they were somewhat sensible. Clearly they just weren’t as sensible as me, I would never fall for something like this.
Nah usually the "UGC creators’ that spread the method you showed in the image are just people that claim they make shoulder pals, same thing as the free GFX scam method that used to be very common
Definitely a scam that’s too good to be true. It’s crazy that some group members have UGC permissions, as they’ve actually uploaded some shoulder pals. Surprise, surprise, the offending group is still up. I’m not sure if the UGC gating will take a hit with everything going on, or if this was apart of innocent UGC group repurposed for that scam. Just a theory though.
