From Free Game Cheats to Arson: Cybercriminals Recruit Children for Espionage and Violent Crimes
Cybercriminals are increasingly viewing children not merely as gateways to their parents' finances but as direct perpetrators of high-risk operations. During extended school breaks, teenagers spend significantly more time immersed in online games and messaging apps, where fraudsters infiltrate with offers of free in-game currency, custom mods, cheats, and cracked game versions.
After establishing initial trust, attackers pressure young users to share SMS verification codes, banking card information, or grant remote access to a parent's smartphone. When persuasion fails, the criminals escalate to intimidation and blackmail using previously obtained personal data.
According to Kaspersky Lab, more than 19 million attempts to spread malicious and unwanted files disguised as popular games were detected from April 2024 to April 2025. These files install spyware and RAT trojans capable of reading private conversations, logging keystrokes, and secretly controlling cameras and microphones.
The danger intensifies when children use a parent's device containing corporate email and business applications, potentially exposing entire organizations to compromise through a single downloaded cheat.
Beyond account theft, adolescents are deceived into thinking they are assisting law enforcement agencies. Criminals threaten the arrest of parents or leverage compromising material to coerce compliance, ultimately demanding that children photograph their homes, surrender keys, set fire to property, or physically attack individuals.
In July, a 12-year-old boy from Leningrad Oblast was forced to assault a police officer, while a 13-year-old from Podolsk was ordered to ignite a gas column at a filling station.
Warning signs include a child suddenly hiding their screen, deleting chat histories, becoming anxious after calls, experiencing sleep disturbances, or receiving unusual instructions. Punishment only strengthens the criminal's hold, as the teenager becomes even more reluctant to confess.
Parents and guardians must reinforce that no unknown contact has the right to request codes, funds, documents, or secret assignments. Any such interaction should be immediately terminated, the conversation preserved, and shown to adults. Genuine law enforcement never recruits minors through gaming chats, as noted in reporting by Izvestia.
Related articles
Beeline Subscribers Targeted in Mass SIM Hijacking via Remote eSIM Issuance
Beeline customers have encountered widespread attempts to hijack mobile numbers through unauthorized remote issuance of eSIM cards. Attackers required only a single careless confirmation from the user to complete the takeover, bypassing traditional SMS or push notifications. The scheme presented a system-level prompt on the smartphone screen requesting login to the operator's personal account, after which a virtual SIM was issued and the physical card blocked. One victim was Kommersant FM editor-in-chief Vladislav Viktorov. Specialist Alexander Baulin suggested possible infrastructure compromise at the operator, though Beeline denied this and described the incident as a coordinated attack on remote SIM issuance mechanisms. The company stated it repelled the assault, with only isolated successful hijackings occurring, and is assisting affected users. Similar attacks have impacted the entire telecom market since the start of the year, enabling fraudsters to access banking apps, government services, and other accounts tied to the number.
Yandex Rolls Out Universal Anti-Fraud Platform to Block Bots and Manipulation Schemes
Yandex has begun deploying its Universal Anti-Fraud system, a single AI-driven platform designed to detect bots, ticket scalping, and other forms of digital fraud across multiple services. The new solution can be integrated into a service within two to four days, replacing the previous months-long process of building separate defenses for each product. Dozens of Yandex services, including Eda, Afisha, Puteshestviya, and applications powered by Alice, are already connected to the platform. In Afisha the system identifies bots that mass-book tickets for popular events to create artificial scarcity, while in Eda it flags repeated fraudulent complaints aimed at obtaining compensation. The platform combines neural networks, analytical methods, and more than one hundred attack-pattern rules, analyzing traffic in real time and applying service-specific parameters. A key advantage is centralized updating: once a new fraud scheme is identified, protections are distributed instantly to all connected products.
Protecting C-Suite Leaders: Defending Executives Against Targeted Cyberattacks
According to PT EdTechLab data, 12% of registered data leaks in Russia originate from attacks on top management. Executives often combine maximum privileges with lax cyber hygiene and public visibility, creating high-value targets. The article outlines three primary attack scenarios: targeted whaling phishing with deepfakes, compromise of personal devices used for both work and private tasks, and account takeover via weak passwords or SIM swapping. Detailed recommendations include mandatory multi-factor authentication, separate corporate devices or MDM solutions, EDR coverage, strict password policies, and network segmentation. The piece stresses that technical measures must be paired with direct communication using business impact language to secure executive buy-in and set an example for the wider organization.
IPA Reports Record High Fake Warning Scam Consultations in Q2 2026
The Information Processing Promotion Agency (IPA) recorded 3,832 personal security consultations in the second quarter of 2026, marking an 8.5 percent increase from the previous quarter. Fake warning scams, which display fabricated malware alerts to frighten users into contacting fraudsters, rose sharply to 1,428 cases, a 23.7 percent jump and the highest figure in two years. These scams carry risks of financial loss and device compromise through fake support services. Consultations dipped temporarily after arrests in May 2025 but have now exceeded levels seen before those arrests. Phishing reports also increased slightly to 146 cases, including schemes impersonating the National Tax Agency. The trend of rising fake warning incidents has continued for three consecutive quarters, underscoring the need for ongoing public vigilance.