Ukrainian law enforcement authorities have uncovered a cybercrime operation involving three suspects aged 19, 21, and 22, accused of stealing hundreds of thousands of gaming accounts belonging to both Ukrainian and international users of a globally popular online game.
According to investigators, the scheme was orchestrated by a 19-year-old teen, who met his accomplices through online gaming platforms. According to the police, the group hacked into players’ personal accounts and re-sold them for cryptocurrency within closed online communities and via a website registered in Russia.
The suspects used a combination of social engineering tactics and tech skills to distribute an info-stealer designed to extract sensitive user data. The malware was disguised as legitimate tools offering in-game bonuses or simplified gameplay, tricking users into installing it on their devices.
The group is believed to have hijacked more than 610,000 gaming profiles. The stolen accounts were sorted based on their potential resale value. For instance, accounts were particularly valuable if they contained rare items, collectible assets, or significant balances of virtual currency.
Law enforcement officers carried out 10 authorized searches at the suspects’ residences. During the raids, they seized approximately $32,000 and €2,000 in cash, along with handwritten notes, 37 mobile phones, 11 desktop computers, 7 laptops, bank cards, 5 tablets, and 4 flash drives.
Cyber police experts also identified more than 300 records containing data on so-called “elite” accounts. Preliminary estimates suggest the illegal operation may have generated up to 10 million hryvnias (~$226,000) in revenue. A full forensic analysis of the seized equipment is currently underway.
The suspects have been formally charged under Part 4 of Article 185 (theft) and Part 5 of Article 361 (unauthorized interference in information and communication systems) of the Criminal Code of Ukraine. If convicted, they face up to 15 years in prison. All three individuals have been placed in pre-trial detention as the investigation continues.