CyberHappenings logo
☰
Home Browse Watchlists Experimental About

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

Ukrainian nationals arrested for phishing and infostealing campaign targeting 610,000 Roblox accounts

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

Three Ukrainian nationals were arrested for allegedly operating a phishing and infostealer-based campaign that compromised over 610,000 Roblox accounts between October 2025 and January 2026. The attackers used social engineering lures offering in-game bonuses to distribute malware that harvested credentials and session tokens, enabling unauthorized account access. Investigators identified at least 357 high-value accounts—owned by users with rare in-game items or significant Robux balances—and sold access to these accounts on Russian-language websites for cryptocurrency, generating approximately $225,000 in illicit proceeds. Authorities conducted coordinated raids across multiple locations, seizing devices, financial instruments, and physical evidence. The suspects face up to 15 years in prison if convicted of malware distribution and account theft.

Timeline

  1. 30.04.2026 19:00 1 articles · 1h ago

    Ukrainian phishing and infostealing operation targeting Roblox accounts disrupted

    Ukrainian law enforcement arrested three individuals suspected of operating a phishing and infostealer campaign that compromised over 610,000 Roblox accounts between October 2025 and January 2026. The attackers used fake in-game bonus offers to deliver malware that harvested credentials and session tokens, enabling unauthorized account access. At least 357 high-value accounts were sold on Russian-language websites for cryptocurrency, generating approximately $225,000 in illicit proceeds. Coordinated raids seized devices, financial instruments, and evidence across multiple locations; suspects face up to 15 years in prison if convicted.

    Show sources
    Open in new tab

Information Snippets

  • Three individuals aged 19, 21, and 22 were arrested in Ukraine for allegedly compromising over 610,000 Roblox accounts between October 2025 and January 2026.

    First reported: 30.04.2026 19:00
    1 source, 1 article
    Show sources

  • The attackers used social engineering lures offering in-game bonuses to deliver infostealer malware that captured login credentials and session tokens.

    First reported: 30.04.2026 19:00
    1 source, 1 article
    Show sources

  • At least 357 high-value accounts were identified and sold on Russian-language websites in exchange for cryptocurrency, generating approximately $225,000 in proceeds.

    First reported: 30.04.2026 19:00
    1 source, 1 article
    Show sources

  • Investigators seized computer equipment, storage devices, mobile phones, bank cards, handwritten notes, €2,500, and nearly $35,000 during raids at 10 locations.

    First reported: 30.04.2026 19:00
    1 source, 1 article
    Show sources

  • The suspects face up to 15 years in prison if convicted of distributing malware and stealing accounts under Ukrainian law.

    First reported: 30.04.2026 19:00
    1 source, 1 article
    Show sources