Latest cybersecurity reporting from selected sources.

Also, US Sanction Cybercrime Enablers, Celine Dion Ticket ScamThis week, ransomware victims paying less, cybercrime sanctions, Celine Dion ticket scams, 23andMe to pay $18 million, a 13-year old Daixin infection, Spiral ransomware, Patch Tuesday, CISA ordered rapid SharePoint patching and Spanish police busted a cybercrime ring. Sore Egyptian World Cup losers.

Coerced Labor in Scam Compounds Is Reshaping How Enterprises Face Fraud RisksFraud operations in Southeast Asia increasingly rely on trafficked workers forced into scams. This reality challenges assumptions about threat actor behavior, complicates attribution and negotiation, and demands that enterprises rethink fraud prevention and disruption strategies.

Cambodian Firm Worked Directly With North Korea, Say US OfficialsThe U.S. and U.K. imposed sanctions on Cambodia’s Huione Group and 146 affiliates linked to the Prince Group TCO, citing human trafficking, forced labor and over $4 billion in laundered cybercrime proceeds tied to North Korean hacks and Western-targeted scams.

Also: Taiwan Charges 14 in $41M Fraud; 1,200 Arrested in Cybercrime BustThis week, a scammer posed as police to steal bitcon, Taiwan charged 14 in a $41M fraud case, U.S. regulators lifted a consent order on Anchorage Digital, U.S. federal prosecutors said "writing code" alone is not a crime and the U.S. Commodity Futures Trading Commission expanded crypto engagement.

Also: Taiwan Charges 14 in $41M Fraud; 1,200 Arrested in Cybercrime BustThis week, a scammer posed as police to steal bitcon, Taiwan charged 14 in a $41M fraud case, U.S. regulators lifted a consent order on Anchorage Digital, U.S. federal prosecutors said "writing code" alone is not a crime and the U.S. Commodity Futures Trading Commission expanded crypto engagement.

Cybercrime Cartels Moving to Places With Limited Law Enforcement CapacitiesCyber scam operations in Southeast Asia have assumed industrial-scale proportions, warns a United Nations report highlighting the rise of criminal groups with global ambitions. The region is a "key testing ground for transnational criminal networks looking to expand their influence," warned UNDOC.

Chinese Cybercrime Groups Ran Operations in Rented Hotels and Guest HousesSri Lankan authorities have arrested more than 200 Chinese nationals who they say overstayed their visitor visas and engaged in large-scale financial scam operations targeting victims across Asia. The Chinese Embassy in Colombo says it supports the law enforcement crackdown.

Infoblox Researchers on Links Between Human Trafficking, Cybercrime and GamblingIllegal gambling operations depend on trafficked individuals to perform cybercriminal activities. Threat researchers at Infoblox explain how cybercriminals use trafficked people for operations such as pig-butchering scams and leverage European sports sponsorships to boost illegal gambling websites.

Hackers Used Dozens of Servers to Distribute Malicious Android AppsLaw enforcement authorities in Singapore, Malaysia, Hong Kong and Taiwan took down a cybercrime ring that used dozens of servers and hundreds of phishing pages across multiple jurisdictions to run a malware-enabled scam operation and steal tens of millions from victims' bank accounts.

Prove's Mary Ann Miller on Strategies for Stronger ID VerificationThe banking and financial services industry will see a growth in scams and frauds perpetrated through fake businesses, incentivizing bad actors to continue creating these fraudulent entities, said Mary Ann Miller, a fraud and cybercrime executive advisor with Prove.

GoldPickaxe Malware Can Record User’s Face - Use Video to Commit Deepfake ScamsA Chinese-speaking cybercrime group with the codename GoldFactory has built a new Android and iOS banking Trojan, GoldPickaxe, that can harvest and steal personal details, including biometric face profiles, that attackers use to create AI-driven deepfakes to fool bank defenses, researchers warn.