Recently, we discussed how cyber criminals are using the popular voice/chat client Discord to steal cookies from the running Roblox process on a Windows PC. Since then, we've noticed another attack going after the same information, only this time it is via Chrome extensions (CRX files).
Post from: Trendlabs Security Intelligence Blog - by Trend Micro
Malicious Chrome Extensions Stealing Roblox In-Game Currency, Sending Cookies via Discord