More than 1,800 Roblox accounts have been breached by hackers who are using the profiles to post messages of support to US president Donald Trump, according to website ZDNet.
Roblox is an online gaming plaform aimed at kids where they can build avatars to explore a virtual world and interact with other users. ZDNet reported that user accounts are being defaced with messages that read “Ask your parents to vote for Trump this year! #MAGA2020...” and “Vote Trump in November! MAGA...”.
Some of the accounts’ avatars have also been redesigned to appear as a person wearing a red MAGA hat and shirt depicting the American flag.
The website believed that the pro-Trump hackers are breaking into the accounts by using user details from previously-compromised Roblox accounts.
ZDNet and threat intelligence firm KE-LA discovered multiple web pages such as one titled “Roblox dump” with lists of Roblox usernames and passwords in plain text.
It added that it has tested tens of thousands of usernames found on the list and found that many were among the ones affected by the pro-Trump hackers.
Most users whose profiles have been affected in the incident admitted that they did not enable two-step verification (2SV) to secure their accounts, ZDNet said.
While Roblox has not commented on the incident, it encourages parents to enable 2SV for their children’s accounts based on information available on its FAQ page.
Roblox has a community group network for users in Malaysia with over 24,000 members, where some users have created cities like Kuala Lumpur as places for others to explore in the game.