Prosecutors in Lviv Oblast, working with the Cyber Police and the Security Service of Ukraine (SBU), have dismantled a criminal group that hijacked Roblox accounts and resold them on Russian websites for cryptocurrency, generating an estimated UAH 10 million in profit. The scheme was allegedly organized by a 19-year-old resident of Drohobych, who recruited two accomplices aged 21 and 22 and is suspected of compromising more than 610,000 accounts belonging to Ukrainian and foreign players.
The group targeted profiles containing valuable virtual items, rare equipment, and in-game currency balances purchased with real money. To break in, the suspects deployed "stealer" malware disguised as gaming cheats and used stolen cookie files that allowed them to log into accounts without passwords. The hijacked accounts were then sold through closed online communities and a website hosted on a Russian domain, with proceeds funneled into crypto wallets.
Investigators conducted 10 searches and seized computer equipment, storage media, mobile phones, bank cards, handwritten notes, over EUR 2,500, and nearly USD 35,000 in cash. The suspects have been served notices of suspicion under Part 4 of Article 185 and Part 5 of Article 361 of the Criminal Code of Ukraine, face up to 15 years in prison, and have been placed in pretrial detention while the investigation continues.
