30 April 2026 - 12:31

Category: Breach

Children's Virtual Hats Stolen

Six hundred thousand Roblox players lost accounts because session cookies are easier to steal than candy. Digital hats are apparently a very lucrative career path.

Children's Virtual Hats Stolen

Source: Security Affairs

The Full Story

Severity: Medium Mood: Ridiculous

Ukrainian authorities have rounded up some entrepreneurs who realised that stealing virtual currency from children is more profitable than a real job. By hijacking session cookies, these masterminds bypassed passwords to rob over 610,000 accounts for their rare digital trousers. Protecting our own slightly more serious accounts involves ensuring session tokens aren't left lying around like discarded sweet wrappers. Using proper multi-factor authentication that doesn't rely on easily intercepted cookies might also help us avoid this specific brand of digital misery.

RobloxRobbery CookieTheft
Open article →