Roblox Ransomware Makes Victims Install Popular Game or Suffer Dire Consequences

A new and very unusual ransomware application was spotted in the wild in late October 2022. The new ransomware is called the Roblox ransomware, after the popular online game.

Roblox will encrypt the victim system and leave files inaccessible. Once encrypted, files receive the extension ".Encrypted_Roblox@mail.com" appended after their original one.

Unlike most ransomware variants, Roblox does not generate a text file with a ransom note on the desktop or in every folder. In the case of Roblox, victims just get a pop-up window that tells them they can restore their files if they install and open or run the Roblox game platform. The full text contained in the pop-up window is as follows:

I want to play a game with you. Let me exmplain the rules:

Your computer files have been encrypted. Your photos, videos, documents, etc...

But, don't worry! I have not deleted all files, yet.

You have 24 hours have open roblox to get the decryption key.

all files will be deleted in timeout.

If you do not have roblox.

Install Roblox and trying open roblox.

Pls click button to decrypt file take one minute to verify.

You can play roblox if files not decrypt now.

Trying to rename file are not decrypt.

Thank you to read this note.