Ukrainian Police Arrest Hackers for Stealing 610,000 Roblox Accounts

Severity: High (Score: 61.2)

Sources: npu.gov.ua, Bleepingcomputer, Uk.Pcmag, Securityaffairs.Co, gp.gov.ua

Summary

Ukrainian authorities arrested three individuals involved in hijacking over 610,000 Roblox accounts, with an estimated profit of $225,000 from their illegal sales. The group, led by a 19-year-old, used malware disguised as game-enhancing tools to steal login credentials and authentication cookies from victims. The operation took place between October 2025 and January 2026, targeting accounts with high-value virtual assets. Law enforcement conducted ten searches in Lviv, seizing $35,000 in cash, multiple electronic devices, and evidence of the hacking scheme. The suspects face charges under Ukrainian law for theft and unauthorized interference with information systems, potentially leading to 15 years of imprisonment. The investigation continues to identify additional victims and accomplices. Key Points: • Three hackers arrested for stealing and selling 610,000 Roblox accounts. • Malware disguised as game-enhancers was used to hijack accounts. • The operation generated an estimated profit of $225,000.

Key Entities

• Data Breach (attack_type)
• Malware (attack_type)
• Ukraine (country)
• T1003 - OS Credential Dumping (mitre_attack)
• T1078 - Valid Accounts (mitre_attack)
• T1203 - Exploitation for Client Execution (mitre_attack)
• T1539 - Steal Web Session Cookie (mitre_attack)
• Roblox (company)