Ukrainian Hackers Arrested for Selling Stolen Roblox Accounts Worth $225,000

Severity: Medium (Score: 51.9)

Sources: gp.gov.ua, Bleepingcomputer

Summary

Ukrainian authorities have arrested three individuals involved in hacking over 610,000 Roblox gaming accounts, leading to a profit of approximately $225,000. The group, consisting of a 19-year-old leader and two accomplices aged 21 and 22, utilized stolen cookies and info-stealing malware to gain unauthorized access to user accounts. They categorized the accounts by value and sold them on Russian websites and closed online communities. Law enforcement conducted ten searches, seizing $35,000 in cash, multiple electronic devices, and evidence of the hacking scheme. The suspects face charges under Ukrainian law for theft and unauthorized interference with IT systems, which could result in up to 15 years of imprisonment. The investigation is ongoing to identify additional accomplices and victims. This incident highlights the significant financial value of virtual gaming accounts, which can contain rare items and substantial in-game currency. Key Points: • Three hackers arrested for stealing and selling over 610,000 Roblox accounts. • The group used stolen cookies and malware to access accounts, targeting high-value profiles. • Law enforcement seized $35,000 in cash and various electronic devices during the operation.

Key Entities

• Data Breach (attack_type)
• Malware (attack_type)
• Ukraine (country)
• T1003 - OS Credential Dumping (mitre_attack)
• T1078 - Valid Accounts (mitre_attack)
• T1203 - Exploitation for Client Execution (mitre_attack)
• T1539 - Steal Web Session Cookie (mitre_attack)
• Roblox (company)