Ukrainian Police Bust Hackers Selling 610,000 Compromised Roblox Accounts
Ukrainian authorities have apprehended three individuals accused of hacking over 610,000 **Roblox** accounts and profiting approximately $225,000 from their sale. The suspects allegedly used malware disguised as game enhancers to steal login credentials.

The police in Lviv made the arrests after executing ten searches, seizing $35,000 in cash, 37 mobile phones, 11 desktop computers, seven laptops, five tablets, and four USB drives. The suspects, aged 19, 21, and 22, are accused of targeting **Roblox** accounts specifically, according to the Prosecutor Generalβs Office.
### Details of the Operation
"Prosecutors of the Lviv region, together with the cyber police and the Security Service of Ukraine, have stopped the activities of a group that gained access to other people's gaming accounts and used them as a source of income,β stated the press release from the Prosecutor General's Office. The compromised accounts allowed users to create games, communicate, and purchase virtual items with in-game currency (**Robux**).

*Image from the police operation*
*Source: gp.gov.ua*
### The Value of Roblox Accounts
**Roblox** accounts often hold significant monetary value due to accumulated resources, purchased items, limited-edition items, in-game progress, and access to premium content.
The authorities revealed that at least 357 of the 610,000 compromised accounts were considered high-value or βeliteβ. The 19-year-old is believed to be the leader, recruiting the other two on gaming forums.
### Hacking Scheme
The scheme involved distributing info-stealing malware disguised as game-enhancer tools. Once a victim's device was infected, their login credentials were harvested. The stolen accounts were then categorized based on value, inventory rarity, and **Robux** balances before being sold on a Russian website and in βclosedβ online communities.
The hackers face up to 15 years of imprisonment under articles 185 (theft) and 361 (unauthorized interference with IT systems). The investigation is ongoing to identify additional accomplices and victims.