RoUtility

RoUtility has gotten a brand new look! Our platform shows an approximate USD values on all Roblox collectibles/limiteds. routility.io

This is a common social engineering method where attackers use a mod pack loader for Minecraft like @CurseForge to inject malware on your computer as soon as the mod pack loads into the game. MFA doesn't solve it. Reporting the account doesn't solve it. Downloading the file doesn't get your computer compromised. Malwarebytes isn't the best solution. You just need to be smarter and not trust loading random modpacks.

Seeing everyone talk about a Discord hack going around where users are receiving messages from compromised accounts about help with a Minecraft Modpack. From a Cybersecurity professional (well.. I quit a little over a week ago but still) here are some things you can do to prevent being compromised/if you accidentally interact with the phish. EVERYONE SHOULD DO THIS: Set up Multifactor Authentication on Discord. Set this up using an authenticator app such as Authy, Google Auth, etc. (This is more secure than email/phone # 2FA. Unfortunately though, some hacks can bypass this but a lot of them can’t) If you come across the phishing attempt, REPORT THE ACCOUNT! If you have accidentally interacted with it, immediately change your password, sign out all sessions, and potentially update your MFA. If you’ve downloaded a file as well, you can start by running a Malwarebytes scan to detect any malicious or unwanted files and quarantine them. Also check for any new services or tasks running in the background (before you kick something off though please google it) I haven’t dug into the details yet about what the scam/hack looks like or how it works, so if you have info / questions feel free to comment them below.

Roblox wants people to use Roblox Plus for transfers, but it's capped at 1k/month + requires Plus just to list items - and Plus doesn't even give Robux So they're forcing users to buy a subscription AND buy Robux just to send it… and keep in mind, the kids who play PLS DONATE are people who put up 20 different selections, what’s the point?

Here's the problem 👇 Roblox wants players to use Roblox Plus for sending/receiving Robux instead of donation games. BUT Roblox Plus limits you to 500/day and 1,000/month. That's not enough. Now YouTubers/Streamers are forced to (illegally) send Robux using group funds again.

The new transfer system is capped at 1,000 Robux/month. Meaning clothing (Shirts/Pants/T-Shirts) will likely be the main fallback for donations, but sellers will need need Roblox Plus and must pay a 15 Robux fee to list items.

Roblox is officially removing cross game gamepass & dev product sales on May 29 Meaning donation games (like haz3m's PLS DONATE) will no longer work the same way Everything is moving to a new in-game Transfers API: - 90% to receiver (no Roblox fee) - Requires Roblox Plus to send - Under 18 = parental approval Read more: devforum.roblox.com/t/disabling-cr…

@reidlosatsahstm @ReclaimTheNetHQ not using AI but ok

Roblox lost 20 million daily users since it started demanding facial scans and ID uploads to access basic features. Half the platform is now stuck in a degraded version where the path back runs through biometric data. People are voting with their absence. reclaimthenet.org/roblox-loses-1…

@DandysWorldNewz At the moment, you're only able to buy Roblox Plus with Credit Card using Xsolla payment processing. They're adding it within the next three months, source: devforum.roblox.com/t/ama-publishi…

@HelloItsVG any proof Roblox uses IP-based alt account detection?

Roblox’s IP-based alt account detection is straight-up broken and mass-banning innocent players on school/college WiFi. One banned account (even from years ago) can wipe out hundreds or thousands of unrelated players who just share the same public IP. Here’s why: >most networks use NAT. >Your device gets a private IP, but Roblox only sees one shared public IP for the entire WiFi (dorms, airports, coffee shops, schools). >CG-NAT in Europe/Asia makes it even worse. The fix is simple: IPv6. Every device gets its own unique global address. No more false “alt account” flags from shared networks. Roblox still doesn’t support IPv6. They have to add it NOW. Thousands of players are losing accounts daily for literally doing nothing wrong. Roblox has to fix this issue!! But I think they won't anytime soon...

That's fine. I've myself fallen victim to it through a friend who was borrowing over $400k of my limited items - they ended up losing their items after downloading some Edge extension called RoSearch which popped up the "update birthday" modal, they took over the account, sold the limiteds to the blackmarket and ran off. You shouldn't feel threatened at all, and it's good to speak out.

@RoUtilityNews @SirDapper Just fyi every extension developer for Roblox knows the guy who did all of this stuff in the past. None of us but me honestly spoke out cuz of the threats. I recommend doing your own research since i cant tell you anything without stuff happening iyk whati mean.

Hot take, if you use ANY Roblox-related extension, you are needlessly putting your account at risk for the sake of convenience. Just know that if you use any, it might come back to haunt you later.

@ValraSwag @SirDapper chromewebstore.google.com/detail/roearn-… looks like it's this

@RoUtilityNews @SirDapper I did. I tried everything but my hands are tied. Look up ntts. thats all imma say. The guy has been harassing and threating me for a year for speaking out. its quite hard when you have someone like him threating you and every other extension developer.

You own a popular Roblox chrome extension called RoValra, you know the same person who has ran these targeted chrome extension phishing campaigns has a Roblox extension that's popping off right now, you don't spread awareness that they could flip the switch to compromise everyone... all I needed to know.

@RoUtilityNews @SirDapper The reason why i wanted to point it out is cuz its been one guy doing it the entire time. All the extensions since around 2022 that hacked people were made by one guy. Pretty sure he stopped hacking people now and actually run somewhat legit extensions that he makes money from

Doesn't really contradict what I said, it's still frontend injection mixed with social engineering at the end of the day They're not just "update and instantly steal everything", they still rely on tricking the user (fake 2SV prompts, phishing UI, etc.) because of protections like 2SV And yeah, growing an extension instead of buying one is just a different attack path, it doesn’t change the core risk model, it just shifts when the trust gets abused

@RoUtilityNews @SirDapper Not entirely true. The extensions you featured worked by injecting from an external api. They were never bought and were all grown up from nbothing to something. Buying extensions rarely ever happens since the malicious actors realized its easier to grow them I assume.

@notjazii AI isn't good at building though, only for programming assistance

roblox paid out $1.5B to creators in 2025 and most of us probably didn't even know that was a thing this year they're projected to pay 1.8B- 2.5B few years ago you needed: > market research > lua > 3d > animation > distribution now you just need ai link your claude, codex or any ai agent to roblox & start making maps gonna try this out myself and share my experience soon

@syrakyooz Unfortunately never happening, they released display names on the platform for a reason.

Roblox but you can claim inactive usernames

Most of the Roblox support team are outsourced through BPO (business process outsource), so they're all Indians, Philippians, etc.. that use automated responses for majority of the support tickets that are sent. If you actually didn't do what your account was banned for, I'd suggest you to try @roappealcom as they've helped with numerous enforcement bans like these.

@Roblox is now fully ignoring my messages, this is how a billion dollar company treats you after spending over $1,000+ on there platform and then getting hacked and losing $200, I've bought so much robux on this platform and I've never requested a refund in my life. #Roblox

the idea that you can "get rid of groomers overnight" with more tracking is just unrealistic. Roblox is an open platform with multi millions of users, UGC, and constantly changing behavior even if you stack things like what you described, bad actors adapt just as fast with new accounts, VPN usage, different devices, you name it it's just not a switch you flip, there’s no perfect system. hard to satisfy everyone

@RoUtilityNews @ReclaimTheNetHQ IP ban + hardware ban + voice pattern recognition + input pattern recognition + user selected game pattern recognition + many other methods = a unique player thumbprint = persistent cross account / hardware ban. They could get rid of groomers overnight. They dont care about that.

I can agree Dollhouse Roleplay is definitely, and has been an issue since. The game has been deleted like 15 times, and the original owner doesn't even know what's going on with the game. People have been reuploading the same game a bunch of times, I guess Roblox doesn't take action just like how they don't care about UGC items that interpolate 1:1 limiteds.

Roblox why are we recommending pedophile infested games to your young audience? Ever server you join in dollhouse roleplay has pedophiles and creeps ready to pounce on the next victim. @Roblox

@DogutsuneRBX People are afraid of developers choosing $$ over what they actually want. You can’t lie, the $3.8/k >> $5.4/k DevEx rate change if 18+ and R15 is tempting, that’s like bribery at that point because it’s almost 2x the pay.

Also I'm gonna get beat up by Roblox Corp's strongest soldiers but: R15 might be okay, but that won't stop me from using R6 or Pseudo-R6 rigs in my games for aesthetical purposes. If I want more detailed movement, R15. Retro vibes? R6. I say it as the creator of Dogu15.

I mean tbh, $5.4/k from a $3.8/k rate would make anyone want to switch over, despite there being ‘3 large games with the required audience’ It’d be more respectable if they didn’t enforce R15, rather just wanted more 18+ consumers I have a few favorite R6 games that I play on, would be a shame if they switched over to enforce R15 because they see more money

@plasma_node the fact these people don't understand the difference between an incentive and a punishment is so fucking laughable. its not even a 42% increase, theres maybe 3 large games on the entire platform with the required audience to make it 100% worth switching

"giving more money to creators, taking away potential profit from Roblox, is sucking up to investors because they're only doing it for R15" Man I don't even care about this R6/R15 bullshit that much it's just so wack seeing you guys crash tf out about it what

and that’s exactly what I agree with I’ve been working on a Roblox extension for a Roblox trading platform that this account is based off of, and seeing posts like this genuinely ruins motivation in releasing the product spreading awareness is good, but framing it like all extensions are the same level of risk just pushes unnecessary FUD instead of actual understanding

@RoUtilityNews I for one think people need to be more cautious about downloading plugins. They should know the risks involved before installing anything. In an era where people are blindly trusting things more than ever, it's good to spread caution about things; there's no harm in that.