Roblox account hackers make $225K profit, but end up in handcuffs
Ukraine’s Cyber Police have busted a hacker ring that targeted high-value Roblox accounts and later resold them on Russian underground forums.
Roblox hacker arrested near Lviv. Image by Ukraine Prosecutor's Office.
Ukraine’s Cyber Police have busted a hacker ring that targeted high-value Roblox accounts and later resold them on Russian underground forums. Hundreds of thousands of accounts were scanned to pick those with the most in-game items.
- Ukrainian police arrested three hackers who stole high-value Roblox accounts and resold them on cybercrime forums.
- The hacking ring scanned over 610,000 Roblox accounts using stolen cookies to identify profiles with rare items and virtual currency.
- Authorities seized computer equipment, mobile phones, over $37,500 in cash, and 357 files containing stolen Roblox account access credentials.
- Roblox's 85M daily users, 40% under age 12, face ongoing threats from account theft and infostealer malware targeting valuable items.
Key Takeaways by nexos.ai, reviewed by Cybernews staff.
Three individuals involved in an organized scheme to hack Roblox accounts were busted in western Ukraine. Reportedly, a 19-year-old led the Roblox hacking ring, with two friends, aged 21 and 22, assisting in running it.
Roblox is a gaming platform where some users spend thousands of dollars on in-game purchases. Various items and in-game currency are tied to specific accounts, and users can exchange items within the game. The platform has over 85 million daily users, including 40% under 12 years of age.
The trio targeted high-value accounts and later resold them on cybercrime forums, the Ukrainian Prosecutor General’s Office announced. The attackers accessed Roblox accounts using stolen cookies.
“The obtained accesses were verified using a special program that showed whether the account could be opened and what it contained. They primarily searched for profiles with accumulated virtual money or rare gaming items,” the authorities explained.
During four months from October 2025 to January 2026, attackers scanned over 610,000 Roblox accounts. According to the Prosecutor’s Office, the investigation revealed that at least 357 files with access to accounts were uncovered.
The authorities don’t mention how many Roblox accounts may have already been sold on the dark web. However, preliminary details reveal that the trio may have netted UAH 10 million ($226K) from the sale of stolen Roblox accounts.
Authorities searched at least 10 properties related to the suspects, seizing computer equipment, storage devices, mobile phones, bank cards, handwritten notes, over €2,500, and nearly $35,000.
During a search at a 44-year-old acquaintance of the suspects’ house, substances resembling cannabis were found. While medical Marijuana in Ukraine was legalized to help with war-related PTSD and chronic pain, recreational use is prohibited.
Millions of Roblox accounts for sale
Roblox users are often targeted by threat actors for valuable in-game items. Earlier this year, hackers announced they were selling over 50 million Roblox records, likely harvested with infostealer malware.
Attacks like that are extremely dangerous to underage Roblox users, as they are more likely to be susceptible to notifications offering a “gift of 10,000 Robux” if the message correctly identifies their specific account details.
Last April, attackers posted an ad on a popular hacking forum, claiming to sell nearly 900,000 Roblox accounts. Similarly, the data dump was likely a collection of details obtained using infostealing malware.
Roblox has faced criticism for the risks posed to its vast underage user base. Earlier this year, the Netherlands Authority for Consumers and Markets (ACM) launched an investigation into Roblox to check whether the platform has implemented adequate safeguards to protect young children from potential harm.
There have been incidents of children confronted with games that are violent or sexual in nature. In addition, Roblox has become a playground for scammers and sexual predators to extort money from children and blackmail them.
Unlock exclusive Cybernews content on YouTube