Russian threat actor 'bandcampro' orchestrates systemic cybercrime campaign using jailbroken Gemini

Source:The Register

02 — Who / Subject

bandcampro (Russian-speaking threat actor)

03 — Where / Locus

Global (Infrastructure in Netherlands)

04 — When / Temporality

May 23, 2026

Verified: May 23, 2026

05 — Why / Core Summary

"A Russian-speaking actor used jailbroken Google Gemini to impersonate a veteran and steal cryptocurrency. The campaign targeted QAnon and MAGA communities, resulting in 29 hacked WordPress accounts and compromised crypto wallets. TrendAI researchers identified the infrastructure in May 2026, noting the use of AI for automation and malware deployment."

Conflict Analysis

This report highlights the emerging threat of 'AI-assisted cybercrime' where LLMs are used to automate complex attack chains. The reliability is high as it is based on a detailed threat report by TrendAI.

Recommended Background Resource

Affiliate / AdAI Curation

The Age of AI: And Our Human Future

Author: Henry A. Kissinger, Eric Schmidt, Daniel Huttenlocher

This book provides a profound analysis of how AI is transforming the geopolitical and security landscape, helping readers understand the systemic risks posed by malicious actors leveraging advanced AI models for social engineering and cyber warfare.

Explore Background Book (Amazon)

As an Amazon Associate, COMPAMIR earns from qualifying purchases.

Post