Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →A SearchBlox Chrome extension used by more than 200,000 people contained a backdoor that appeared capable of stealing Roblox credentials. The incident was reported on November 23, 2022. The figure refers to users or downloads of the larger extension—not 200,000 confirmed hacked accounts or verified victims.
If SearchBlox was installed in any Chrome profile you used, remove it, clear browser sessions, change potentially exposed passwords from a clean device or browser, and enable two-step verification.
As an Amazon Associate I earn from qualifying purchases.
Historical extension IDs
Check whether either of these IDs appeared in an affected Chrome profile:
blddohgncmehcepnokognejaaahehncd— more than 200,000 users or downloads reportedccjalhebkdogpobnbdhfpincfeohonni— 959 downloads reported
These are historical incident indicators. Their inclusion does not mean the extensions are still available today.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
What was SearchBlox?
SearchBlox was marketed as a Roblox-related Chrome extension for searching players or servers. Two similarly named extensions were identified as unsafe in the 2022 incident.
According to BleepingComputer’s technical analysis, both contained code associated with a backdoor. Google told the publication that the extensions had been removed from the Chrome Web Store, blocklisted, and set for automatic removal from systems where they were installed at the time.
How the backdoor appeared to work
In the larger extension, suspicious code was found in content.js; in the smaller one, it appeared in button.js. Both contacted the defanged address hxxps://searchblox[.]site/image.png/image.txt.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
The response was made to look like image-related content but contained obfuscated JavaScript. After decoding, the code appeared designed to send Roblox credentials and related account information to releasethen[.]site. It also appeared to inspect information associated with Rolimons, a Roblox trading platform.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
That distinction matters: finding credential-exfiltration code establishes a serious capability, but it does not prove that every installation transmitted credentials, that every user lost Robux or items, or that a particular number of accounts were accessed.
What attackers could potentially gain
- Control of a Roblox account.
- Roblox credentials or browser session-related information.
- Access to tradeable assets, including limited items.
- Other website credentials if the extension could read or modify pages visited in Chrome.
- Recovery complications if an attacker changed an email address, password, or security setting.
Chrome explains that extensions with broad site access can read, request, or modify data on websites. A Roblox-themed extension therefore should not be treated as a Roblox-only risk. See Google’s guide to extension permissions.
Was Roblox itself hacked?
No evidence in the cited reporting establishes a breach of Roblox’s servers. This was a third-party browser-extension incident: users installed software that appeared capable of taking information from their browser.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteThree claims should remain separate:
| Established by the reporting | Not established |
|---|---|
| Backdoor code was found in two SearchBlox extensions. | The exact number of compromised Roblox accounts. |
| The larger extension had more than 200,000 reported users or downloads; the smaller had 959. | That every installation contacted an attacker. |
| The code appeared capable of credential theft and appeared to target Rolimons-related information. | The total value of stolen Robux or items. |
| Google removed and blocklisted the extensions at the time of the report. | Whether the original developer added the backdoor. |
Who added the malicious code?
Attribution was unresolved in the available reporting. It was not authoritatively determined whether the original developer intentionally added the backdoor or whether the extension, developer account, build process, or distribution process had been compromised.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Community speculation about suspicious inventories or related Roblox accounts is not proof of responsibility. The responsible conclusion is that the extensions were unsafe and their attribution remained undetermined.
What affected users should do
- Stop using the affected browser session. Do not enter new passwords while a suspicious extension remains active.
- Remove SearchBlox from every Chrome profile and computer. On desktop Chrome, select More (three dots) → Extensions → Manage extensions, find SearchBlox or an unrecognized Roblox-related extension, select Remove, and confirm. Google documents this path in its extension-removal guidance.
- Check other Chromium browsers. An extension installed in Chrome may also have been installed separately in Edge, Brave, Opera, or another Chromium-based browser.
- Clear cookies and revoke active sessions where possible. Clearing cookies can invalidate browser sessions, but it does not undo a stolen password or recover missing items.
- Change your Roblox password from a clean browser profile or trusted device.
- Change reused passwords. Prioritize accounts where you used the same password, entered credentials while SearchBlox was active, or granted the extension broad website access.
- Enable two-step verification on Roblox, your email account, and other important services.
- Review Roblox security and account activity. Check the account email, recovery information, unfamiliar sessions, trade history, inventory, Robux balance, and payment details.
- Contact Roblox Support if your account is inaccessible or items, Robux, or security settings changed without permission.
- Scan the device if necessary. Use reputable, updated antivirus or antimalware software if the extension came with other suspicious software, returns after removal, or the computer behaves unusually.
Uninstalling the extension is essential, but it cannot prove that previously collected information was not copied. Password rotation, session cleanup, and two-step verification are still appropriate for potentially exposed accounts.
If Chrome already disabled SearchBlox
Leave it disabled and remove it rather than manually re-enabling it. Chrome may disable extensions it considers unsafe or extensions that no longer meet its requirements. See Google’s guidance on disabled or unsafe extensions.
If the extension will not go away
Record its name and ID, then investigate why Chrome is restoring it:
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
- Check whether the browser is managed by a school, employer, or family-management service.
- Run reputable antimalware software.
- Remove suspicious programs installed around the same time.
- Review browser-management policies if the extension repeatedly returns.
- After securing accounts, consider creating a new Chrome profile.
- For a high-value or extensively compromised computer, seek professional help or consider an operating-system reinstall after backing up essential files.
Do not repeatedly reinstall Chrome while continuing to use the same compromised profile or device. That may not remove the cause.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Why a Chrome Web Store listing was not a safety guarantee
Store distribution can reduce some risks, but it does not guarantee that every extension is harmless. Permissions can give an extension access to browsing activity, tabs, copied data, or information on websites you visit. Read requested permissions and ask whether the feature is worth that access.
Be especially cautious with extensions promising free Robux, trading advantages, server bypasses, or unusual capabilities that require access to every website. Check the developer, update history, reviews, and independent reputation—but treat all of those as signals, not proof of safety.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problemsThe original report noted that the extension and related URLs had clean VirusTotal reputations at the time. A clean scan did not prove the extension was safe, particularly because the behavior was embedded in extension code and used obfuscation.
Best Value
- The information below is per-pack only
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
What parents and moderators should check
Do not assume only one child’s visible Chrome window matters. Check family computers, separate Chrome profiles, school-issued devices, and other Chromium browsers. Ask whether shared passwords or saved payment information were involved, then review Roblox trades, inventory, email, and recovery settings.
The incident exploited trust in a browser store and a tool tailored to a popular game. It should be treated as a reminder to review browser extensions—not as evidence that children were uniquely careless.
What remains unknown
The available evidence supports the existence of a malicious backdoor and its apparent ability to exfiltrate Roblox-related credentials. It does not establish the number of successful account takeovers, the number of users who actually ran a malicious version, whether every installation reached the attacker’s infrastructure, or the total value of any stolen assets.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Those limits do not make the risk harmless. They mean affected users should take sensible containment steps without treating the 200,000 figure as a confirmed victim count.
Sources
- BleepingComputer: technical incident report
- Google Chrome: install, manage, and remove extensions
- Google Chrome: understand extension permissions
- Google Chrome: account-security recommendations
Frequently Asked Questions
Is SearchBlox still dangerous?
The documented incident concerns versions reported in 2022. Do not install a similarly named extension without verifying its current listing, developer, permissions, and historical ID; remove any matching or unrecognized installation.
Should I change my Google password too?
Change it if you used it while the extension had broad website access, reused the password elsewhere, or see unfamiliar account activity. Make the change from a clean browser or trusted device.
What if my Robux or limited items are missing?
Secure the account first, preserve relevant emails and transaction details, and contact Roblox Support promptly.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
