The Good, the Bad and the Ugly in Cybersecurity – Week 7

This report summarizes multiple active threats: large-scale identity theft and sportsbook fraud (3,000 victims, ~$3M), a $73M romance-crypto scam, the JokerOTP phishing-as-a-service enabling >28,000 attacks (~$10M losses), widespread abuse of Google’s Gemini AI by state-linked actors to accelerate profiling, phishing, and exploitation development, and an ongoing UNC3886 espionage campaign using zero-days and rootkits against Singapore telecom providers — collectively illustrating high-impact criminal and nation-state operations across financial fraud, phishing, malware, and targeted espionage.