Ukrainian authorities have arrested a hacker group in the Lviv Oblast that’s been accused of stealing and selling Roblox accounts, and making $250,000 in profit.
The suspects allegedly used stolen session data to gain unauthorized access to user accounts, targeting profiles with valuable in-game currency and digital items. Investigators have also said the group operated for several months, checking hundreds of thousands of accounts before selling access to the most profitable ones online.
Ukrainian law enforcement has dismantled a cybercrime group accused of stealing and selling access to gaming accounts, mainly targeting Roblox users.
Prosecutors in the Lviv region, working with cyber police and the Security Service of Ukraine, say that the group gained unauthorized access to gamers' profiles and monetized them through online sales.
Many of the compromised accounts contained virtual currency or rare in-game items, increasing their resale value.
According to the investigations, the group relied on stolen cookies, which is basically data that keeps users logged into online services and that allows the attackers to bypass login credentials.
After gaining entry, they used automated tools to verify whether accounts were active and to assess their contents. The group focused on accounts with valuable digital assets, including accumulated in-game currency and rare items.
The investigation revealed the scale of the operation, and the numbers are staggering. Between October 2025 and January 2026, the group checked more than 610,000 accounts to identify those with the highest value.
“They selected those that contained the most valuable digital resources. During investigative actions, law enforcement discovered 357 files with such accounts. Subsequently, these files were sold on Russian resources, with payment made to a cryptocurrency wallet,” said the investigators.
Authorities discovered hundreds of files containing stolen account data. The suspects allegedly sold access to select accounts on Russian online platforms, with payments made through cryptocurrency wallets.
Prosecutors estimate the group generated nearly $250,000 in profit during the scheme.
Law enforcement carried out 10 searches at locations linked to the suspects. During the raids, authorities seized computer equipment, storage devices, mobile phones, bank cards, and cash, including several thousand euros and tens of thousands of US dollars.
Investigators identified a 19-year-old resident of Drohobych as the alleged organizer, assisted by two individuals, aged 21 and 22.
Prosecutors have notified the suspects of charges, including theft committed by a group and unauthorized interference with information systems that resulted in data leakage.
Roblox accounts often carry both gaming and financial value due to accumulated resources and purchased items, investigators say.
This makes them attractive targets for cybercriminals seeking to profit from unauthorized access and resale.
Answer: Authorities detained three suspects, including a 19-year-old alleged organizer and two accomplices aged 21 and 22.
Answer: They used stolen session cookies, which allowed direct access to accounts without needing login credentials.
Answer: Investigators estimate the group earned about $250,000 from selling compromised accounts.
Answer: The group checked over 610,000 accounts to identify those with valuable digital assets.
Answer: Authorities say the accounts were sold on Russian online platforms, with payments made in cryptocurrency.
Answer: These accounts often contain valuable digital currency and rare items that can be resold for real money.
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。