Hackers stole hundreds of thousands of Roblox accounts


More than 610,000 Roblox accounts were reportedly stolen. Was yours or your child’s among them? Ukrainian police arrested three individuals in Lviv who allegedly orchestrated one of the largest Roblox account theft operations to date.

Between October 2025 and January 2026, the hacking group is said to have compromised over 610,000 Roblox accounts, including at least 357 high-value “elite” accounts, making around $225,000 from selling access to them. The hackers distributed infostealing malware disguised as game-enhancement tools, harvested login credentials from infected devices, and sold accounts through a Russian website and closed online communities based on their value.

Read more…
Source: Malwarebytes Labs


Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox


Related:

  • Majorca: Calvià City Council hit by €10million ransom demand

    January 17, 2024

    Saturday witnessed a cyberattack on the Spanish city of Calvià in Majorca, with hackers now demanding 10 million euros to be paid to restore functionality to integral systems. The Calvià City Council website has been offering updates on the situation, saying the local authority is “working to recover normality as soon as possible, after having been ...

  • Binge & Dan Murphys Among Major Brands Hit By Cyber Attack

    January 17, 2024

    Thousands of retail customers have fallen victim to a hacking scheme where scammers access their online accounts to make fraudulent transactions. Local scammers, having bought online login details from overseas cybercriminals, bragged in a chat online about purchasing iPhones, clothing and alcohol (almost $800 worth) with strangers’ money. The Iconic, an online retailer, said last week ...

  • Alleged FruitFly malware creator ruled incompetent to stand trial

    January 16, 2024

    On January 4, 2017, Case Western Reserve University (CWRU), located in Cleveland, Ohio, became aware of an infection on more than 100 of its computers. The university was notified by an undisclosed third party, who provided information to help the team find and identify the malware. CWRU began working with the FBI, who determined that the ...

  • Known Indicators of Compromise Associated with Androxgh0st Malware

    January 16, 2024

    The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) are releasing this joint Cybersecurity Advisory (CSA) to disseminate known indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs) associated with threat actors deploying Androxgh0st malware. Multiple, ongoing investigations and trusted third party reporting yielded the IOCs and TTPs, and provided ...

  • Latest Cyber-Attacks in Serbia Raise Fresh Questions about Defence

    January 16, 2024

    Serbia’s inaction in the face of frequent cyber-attacks on public institutions and private companies is a growing concern, cyber security expert Ivan Markovic has told BIRN, after the online forum he co-founded reported that a server used by the Serbian army had been breached and state energy company Elektroprivreda Srbije, EPS, had been hit with ...

  • Data breach hits Navy contractor Fincantieri Marine Group

    January 15, 2024

    Italian shipbuilding firm Fincantieri’s U.S. arm Fincantieri Marine Group, which is a contractor for the U.S. Navy, disclosed that it had 16,769 individuals’ data compromised following an April ransomware attack that resulted in significant production disruptions. In breach notification letters sent to impacted individuals earlier this month, FMG said that some of its systems had been ...