- Bitdefender reported Roblox players lured by a fake “undetected” Xeno Executor mod spreading malware
- Infection chain delivers a Java‑based RAT and infostealer stealing browser data, online accounts, payment info, and crypto wallets
- Malware also enables surveillance and remote control; campaign peaked in March 2026 and remains active against Roblox’s 82M players
Cybercriminals are targeting Roblox players with an infostealer and a Remote Access Trojan (RAT) malware that grants them full control over compromised computers, experts have warned.
