Roblox accused of endangering 100 million players’ data

Roblox, the popular free video game for kids and teens, is accused of endangering the data of more than 100 million players. According to a CyberNews poll, the game’s Android app is riddled with security holes. These breaches could be used by hackers to collect players’ personal information.

In an investigation published April 28, 2021, CyberNews, a popular media outlet dedicated to computer security, is publicly accusing Roblox of Neglecting to protect its users’ data. The port claims to have found many entry points for hackers in the game’s Android app code, which has over 100 million installs on the Play Store.

The survey has been updated Bad security practicesAnd the ‘Legacy algorithms’, And a vulnerability that endangers Android smartphones running in versions ranging from Android Kit Kat 4.4 to Android Marshmallow 6.0. Ultimately, 7.5% of the handsets are affected. Exploit An old bug called JanusHackers can collect a list of Android apps installed on a smartphone and remotely download fake versions (full of fraudulent and intrusive ads) to replace them. A dangerous malware called Agent Smith effectively exploits this flaw in order to generate advertising revenue.

Roblox ensures that player data is not compromised

These various security issues are further exacerbated by usage “A local database for recording player data”. All of these factors make Roblox A target for malicious individuals Looking for easy money. The game allows players to buy and sell virtual items and earn money by creating content. By exploiting the vulnerabilities, a hacker could theoretically seek to steal money stored in the local Roblox database.

Also read: TikTok Accused of Collecting Data from Millions of Children

In a statement sent to various media outlets, Roblox quickly stepped up to the Denies the researchers’ conclusions. We take all reports seriously and investigate promptly when researchers first contacted us in March. Our investigation determined that there was no relationship between these allegations and the actual risks to user data privacy. One of the claims was inaccurate while the other three were about not using the idle code on the Roblox platform. Regardless, we have removed inactive code as part of our commitment to the safety and security of our users. ” Roblox shocked.

Source : Internet news