The Darcula phishing-as-a-service (PhaaS) network has stolen over 884,000 credit cards in seven months by deploying phishing texts, according to cybersecurity firms NRK and Mnemonic. The group used a phishing toolkit called Magic Cat, which enabled real-time data and PIN capture, involving more than 600 scammers and resulting in over 19,000 victims in Norway alone. Meanwhile, a group of young cybercriminals stole $243 million worth of Bitcoin, a heist that escalated into a kidnapping plot targeting cryptocurrency investors in France. Abductors have demanded ransoms between $6 million and $10 million in cryptocurrency, with reports of violent tactics including mutilations. French authorities have arrested and charged five individuals in connection with the kidnapping of the father of a cryptocurrency entrepreneur in Paris. Additionally, two threat groups named Reckless Rabbit and Ruthless Rabbit have been scamming thousands using AI deepfakes, celebrity endorsements, and fake investment sites through Facebook ads, draining victims of funds. The ongoing cybercrime wave highlights the increasing risks faced by cryptocurrency investors and the broader financial ecosystem.