Ukraine’s Cyber Police have busted a hacker ring that targeted high-value Roblox accounts and later resold them on Russian underground forums. Hundreds of thousands of accounts were scanned to pick those with the most in-game items.
The authorities don’t mention how many Roblox accounts may have already been sold on the dark web. However, preliminary details reveal that the trio may have netted UAH 10 million ($226K) from the sale of stolen Roblox accounts.
Authorities searched at least 10 properties related to the suspects, seizing computer equipment, storage devices, mobile phones, bank cards, handwritten notes, over €2,500, and nearly $35,000.
To do this, they used stolen cookies – technical data that “remember” the user in the system and allow them to log into the account without re-entering the password.
The obtained accounts were verified using a special program that showed whether the account could be opened and what it contained. They primarily searched for profiles with accumulated virtual money or rare gaming items.
From October 2025 to January 2026, over 610,000 user accounts were checked in this manner. They selected those that contained the most valuable digital resources. During investigative actions, law enforcement discovered 357 files with such accounts.
Subsequently, these files were sold on Russian resources, with payment made to a cryptocurrency wallet.
According to preliminary information, the profit from the sale of accounts during the entire period of the group’s activities could reach nearly 10 million UAH.
Within the framework of the criminal proceedings, 10 searches were conducted at the residences and registrations of individuals who could be involved in the illegal activities. Computer equipment, storage devices, mobile phones, bank cards, handwritten notes, over 2,500 Euros, and nearly 35,000 US dollars were seized.
Under the procedural guidance of the Lviv Regional Prosecutor’s Office and the Frankivsk District Prosecutor’s Office of Lviv, the group members were informed of suspicions of theft by prior conspiracy of a group of individuals, as well as unauthorized interference in the operation of information (automated) systems, which led to the leakage of information by prior conspiracy of a group of individuals (Part 4 of Article 185, Part 5 of Article 361 of the Criminal Code of Ukraine).
In addition, substances resembling cannabis were found in a 44-year-old acquaintance of the suspects. He was detained, and the seized substances will be sent for examination. The man was informed of suspicion of illegal acquisition and storage of narcotic substances with the intent to sell (Part 1 of Article 307 of the Criminal Code of Ukraine).
Source:
