Ukrainian cyber police, Lviv regional prosecutors, and the Security Service of Ukraine arrested three men on charges under Ukraine’s Criminal Code Article 185 (theft) and Article 361 (unauthorized interference with information systems), for hijacking 610,000 Roblox accounts and netting $225,000 in sales.
The 19-year-old identified as the group’s leader recruited accomplices aged 21 and 22 through gaming forums, then built an account-theft scheme that ran from October 2025 to January 2026. Their method was info-stealing malware promoted as a game-enhancer tool. Victims downloaded it, the malware collected login credentials, and the group took over the accounts.
Stolen accounts were categorized by value, inventory rarity, and Robux balances. At least 357 of the 610,000 were classified as “elite” high-value accounts. The group listed them on a Russian website and in closed online communities, pricing them based on their assessed value.
Roblox accounts carry genuine financial value: limited-edition items that can’t be re-obtained, years of in-game progress, Robux balances with real monetary worth, and paid access to premium content. That’s the property the three men are accused of stealing.
Police conducted ten searches, seizing $35,000 in cash, 37 mobile phones, 11 desktop computers, seven laptops, five tablets, and four USB drives.
Together the two charges carry a maximum of 15 years’ imprisonment. Prosecutors said they’re still working to identify additional accomplices and victims.
The Lviv prosecutor’s office hasn’t set a trial date. Investigation continues.
— James Okafor