CyberHappenings logo
☰
Home Browse Watchlists Experimental About

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

Ukrainian law enforcement disrupts Roblox account hijacking ring with 610,000 compromised accounts

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

Ukrainian cyber police arrested three individuals alleged to have hijacked 610,000 Roblox accounts between October 2025 and January 2026, generating approximately $225,000 in illicit revenue. The threat actors used info-stealing malware disguised as game-enhancer tools to harvest credentials, then categorized and sold high-value accounts via Russian websites and closed online communities. Authorities executed ten search warrants in Lviv, seizing $35,000 in cash, 37 mobile phones, 11 desktops, seven laptops, five tablets, and four USB drives. The group targeted at least 357 "elite" accounts, which often contain rare virtual items, financial balances, and years of progress, making them attractive targets for monetization.

Timeline

  1. 29.04.2026 21:32 1 articles · 1h ago

    Roblox account hijacking ring disrupted in Lviv with 610,000 accounts compromised

    Ukrainian cyber police arrested three individuals linked to a Roblox account hijacking scheme that operated from October 2025 to January 2026. The group used credential-stealing malware disguised as game-enhancer tools to compromise accounts, which were then categorized by value and sold via Russian websites and closed communities. Authorities executed ten search warrants in Lviv, recovering $35,000 in cash, multiple devices, and charging suspects under Articles 185 and 361 of Ukrainian law.

    Show sources
    Open in new tab

Information Snippets

  • Three individuals aged 19, 21, and 22 were arrested in Lviv, Ukraine, for hijacking 610,000 Roblox accounts between October 2025 and January 2026.

    First reported: 29.04.2026 21:32
    1 source, 1 article
    Show sources

  • The threat actors allegedly earned approximately $225,000 by selling compromised accounts through Russian websites and closed online communities.

    First reported: 29.04.2026 21:32
    1 source, 1 article
    Show sources

  • The scheme involved distributing info-stealing malware disguised as a game-enhancer tool to harvest login credentials from victim devices.

    First reported: 29.04.2026 21:32
    1 source, 1 article
    Show sources

  • Authorities executed ten search warrants, seizing $35,000 in cash, 37 mobile phones, 11 desktop computers, seven laptops, five tablets, and four USB drives.

    First reported: 29.04.2026 21:32
    1 source, 1 article
    Show sources

  • At least 357 of the hijacked accounts were classified as "elite" due to high Robux balances, rare inventory items, or significant in-game achievements.

    First reported: 29.04.2026 21:32
    1 source, 1 article
    Show sources

  • The 19-year-old suspect is identified as the group leader who recruited accomplices via gaming forums and coordinated the account-hijacking operation.

    First reported: 29.04.2026 21:32
    1 source, 1 article
    Show sources

  • Charges filed under Ukrainian law include theft (Article 185) and unauthorized interference with IT systems (Article 361), with potential penalties of up to 15 years imprisonment.

    First reported: 29.04.2026 21:32
    1 source, 1 article
    Show sources