Ukrainian police detain hackers suspected of stealing thousands of Roblox accounts for resale

Ukrainian law enforcement has detained a group of local hackers suspected of stealing more than 610,000 user accounts from the gaming platform Roblox and reselling them for cryptocurrency on Russian websites, authorities said.

Police said on Monday the victims included both Ukrainian and foreign players whose accounts contained valuable digital items, rare equipment and in-game currency purchased with real money. Some accounts also held remaining balances of Roblox’s virtual currency, making them particularly attractive to cybercriminals.

The suspects face up to 15 years in prison if convicted and have been placed in pretrial detention while the investigation continues.

According to law enforcement officials, the scheme was allegedly organized by a 19-year-old Ukrainian who met his accomplices on gaming forums last year. Investigators say he developed a system to break into players’ accounts and resell them through closed online communities and a website whose domain is registered in Russia.

Authorities say the group distributed information-stealing malware disguised as software promising gameplay advantages or free in-game bonuses. Once installed on victims’ devices, the malicious programs harvested login credentials and other sensitive data.

Over several months, investigators say the malware allowed the hackers to access more than 610,000 player profiles.

The stolen accounts were then sorted by their potential resale value, according to police. Profiles containing collectible items, rare inventory objects or large balances of virtual currency were considered the most profitable on the online marketplace where players legally buy and trade digital goods.

As part of the investigation, authorities conducted 10 searches in Ukraine’s western region and seized computers, mobile phones, bank cards and handwritten notes. Officers also confiscated more than €2,500 and nearly $35,000 in cash, according to investigators.

Preliminary estimates suggest the scheme generated around 10 million hryvnias (about $227,000).

Law enforcement officials said forensic analysis of the seized devices is ongoing as investigators attempt to determine the full scale of the operation and identify additional participants.