Hackers arrested for hijacking and promoting 610,000 Roblox accounts
OSINT
The Ukrainian police be pleased arrested three those who hacked higher than 610,000 Roblox gaming accounts and bought them for a profit of $225,000.
The arrests had been made by the police in Lviv after conducting ten searches on focused areas, seizing $35,000 in cash, 37 cellphones, 11 desktop computers, seven laptops, five pills, and 4 USB drives.
Even though the police did no longer specify the sport platform focused by the hackers, historical 19, 21, and 22, the Prosecutor Overall’s Place of job mentioned that it used to be Roblox.
“Prosecutors of the Lviv area, alongside with the cyber police and the Security Service of Ukraine, be pleased stopped the actions of a crew that won entry to other folks’s gaming accounts and extinct them as a source of earnings,” reads the press release from the Prosecutor Overall’s Place of job.
“This concerns profiles in Roblox, the put customers build games, focus on, and aquire digital items with in-sport forex. For plenty of, such accounts maintain no longer fully gaming brand nonetheless moreover financial brand on account of accumulated resources and bought items.”
Image from the police operation Offer: gp.gov.ua
Roblox is a gaming platform the put folk can build and play thousands and thousands of games. Roblox accounts aren’t limited to gaming, as they may be able to moreover be extinct for building resources on Roblox Studio and promoting items to others, in substitute for the in-sport forex Robux.
For plenty of, these accounts be pleased monetary brand, maintain high Robux balances, dangle limited-edition items that can no longer be got, defend years of in-sport progress with unlocks and achievements, supply paid entry to top fee remark, and extra.
The authorities say that, as a minimum 357 of the 610,000 user accounts the hackers took over between October 2025 and January 2026, had been high-brand (“elite”) accounts.
The 19-three hundred and sixty five days-former is identified because the chief of the risk crew, who recruited the opposite two on gaming boards and home up the legend-hacking plan.
The plan eager promoting data-stealing malware disguised as a sport-enhancer machine, infecting victim gadgets, and collecting their login credentials.
The stolen accounts had been then categorized by brand, inventory rarity, and supreme Roblux balances, and bought by activity of a Russian web say and on “closed” on-line communities.
For these offenses, the hackers had been charged underneath articles 185 (theft) and 361 (unauthorized interference with IT programs) and face as much as fifteen years of imprisonment.
The authorities proceed their investigation to title other possible accomplices and victims of the hacking crew.
AI chained four zero-days into one exploit that bypassed each and each renderer and OS sandboxes. A wave of most up-to-date exploits is coming.
On the Self ample Validation Summit (May perhaps 12 & 14), word how self sustaining, context-rich validation finds what’s exploitable, proves controls maintain, and closes the remediation loop.
