Hackers Want to Be “Friends” with Everyone

Less than a couple of months ago, multiple users reported getting random friend requests in VRChat from unknown people who might be, according to the rumors, supposedly stealing avatars from other players after adding them as friends.

The requests are rumored to have been sent by bots created by users whose real motives might be unknown. Some of the names belonging to the list of accounts associated with these bots include LittleGirl UwU, -LittleWitch-, aihitoru, and photon-free. Also, users reported at least 12 different accounts that are most likely used for bots created by Magic3000, a Russian hacker who got interested in VRChat’s security systems and got banned for abusing the API about a year ago.

Regardless of whether you’re looking for friends or not, it’s best not to accept any requests from people you don’t know. But in the meantime, if you’re paranoid about the safety of your content, make sure your avatar is so bad no one would ever think about stealing it, in which case you might want to get a highly unoptimized Ugandan TDA wolfboy.