This 19 year old in Ukraine made $225,000 hijacking 610,000 Roblox accounts by hiding his malware inside a fake game enhancer

He ran the operation out of an apartment in Lviv from October 2025 to January 2026
Then recruited two partners, a 21 year old and a 22 year old, on gaming forums
The malware was advertised as a Roblox game enhancement tool that promised better performance and new features
Once installed it stole the user's browser session cookie instead of the passwords
A stolen cookie skips the login completely, so the password and the two factor code never come up at all
The crew filtered the accounts with the biggest Robux balances and rarest in game items, ending up with 357 elite accounts on top of the 610,000
They sold the elite ones on Russian language darknet forums and got paid in crypto
Ukrainian cyber police traced the cashout wallet back to the Lviv apartment and ran ten coordinated raids one morning
They seized $37,500 in cash, 37 phones, 11 desktops, 7 laptops, 5 tablets and 4 USB drives
The leader is facing up to 15 years for a Roblox malware run he started when he was 18