Prosecutors in Ukraine's western Lviv region say three Ukrainians will stand trial for allegedly stealing access to more than 610,000 Roblox accounts and selling them to buyers in Russia between May 2025 and April 2026. A 19-year-old from Drohobych is named as the organiser, with two 22-year-old associates; Ukrainian authorities first announced the case in April, when police said they had identified the alleged organiser and were investigating its full scale, and had already reported that the group distributed information-stealing malware disguised as software offering gaming advantages or free in-game bonuses. The mechanism is the part that generalises beyond gaming: at the centre of the operation were stolen session tokens — cookies — which allow an attacker to take over an active account without the victim's password; the group fed the stolen tokens into software that checked whether they were still valid, and for each working token assessed what the corresponding account held, including virtual currency and rare in-game items. The most valuable accounts were sold individually and the rest bundled in bulk or at a discount, advertised through Russian online platforms with payment in cryptocurrency, and some accounts went for around 70 rubles (about US$0.80) each. Prosecutors estimate the sales could have generated roughly US$480,000, and investigators traced nearly US$54,000 in crypto proceeds converted into Ukrainian currency and transferred to the suspects' bank accounts. All three are in custody facing charges including theft, money laundering, unauthorised interference with computer systems and the illegal sale of restricted information, carrying a maximum of 12 years. Roblox is a platform used heavily by children and teenagers, which is why account-value discovery — sorting victims by what their account is worth — rather than indiscriminate credential harvesting is the notable tradecraft here.

• Source article