A Japanese Scam Boss Ran a Poipet Compound Without Ever Setting Foot in Cambodia Thai immigration officers arrested a 39-year-old Japanese man in Bangkok's Watthana district over the weekend, wanted in Japan as a leadership figure in a Cambodia-based fraud network. Police identified him only as Sasaki. He's accused of directing a call center operation out of Poipet that impersonated Japanese police officers to swindle victims back home, the kind of tokushu sagi ring where the caller poses as someone in authority, with losses estimated in the billions of yen. There's no record of Sasaki ever setting foot in Cambodia. He lived in a luxury apartment in Bangkok and ran the operation remotely, making frequent trips to China, Malaysia, and Vietnam to keep it moving. Japanese investigators say he worked alongside Chinese managers at the Poipet compound, and that together they targeted heavily indebted Japanese nationals and trafficked them to the base to work the phones. Nagoya District Court issued the warrant on April 1, on fraud charges. He's expected to be extradited to Japan. Thai police framed the arrest around their anti-trafficking center and the usual line about not letting the country serve as a transit point for international criminals.

You should sanction all of the sketchy Iranian OTC brokers in Canada being abused by illicit actors. Two were used in recent violent home invasion robbery / extortion cases to launder crypto. -Nia Nations Exchange (NNCE) -Million Exchange (MillionEx)

- For those who continue to frame the #SanDiego mosque shooting as something other than neo-Nazi and white supremacist ideology, the extensive symbolism found on the suspects, their weapons, and vehicle leaves little room for doubt. - Sonnenrad (Black Sun), swastikas, Odal runes, and the Atomwaffen Division’s trefoil clearly point to a deep ideological commitment. - To anyone who monitors and researches violent extremist movements, this is as clear as daylight. - I won’t go into the details of the circulating manifesto at this time, but the ideological motivation and intent are unmistakable. - This attack appears to be rooted in accelerationism (see also the writings on the handgun) - The Atomwaffen Division (AWD) trefoil patch visible on the arm is the symbol of a violent neo-Nazi and white supremacist terrorist group. It specifically represents “accelerationism,” the belief that modern democratic society is beyond saving and must be violently destroyed. - The goal is to trigger a societal breakdown—often envisioned as a race war or "boogaloo"—so that a white ethnostate can be built from the ruins. - Acts like this are not impulsive or accidental. They require deep ideological commitment, extensive preparation, and a conscious decision to cross into violence. - The sheer volume, consistency, and specificity of the neo-Nazi symbols and references make it clear that the suspects had fully embraced accelerationist ideology and had almost certainly been planning this attack for some time. - While there has been a documented rise in online radicalization among teenagers and young adults across various violent ideologies far-right, Islamist, nihilistic/mass shooter subcultures, etc.), what makes this case particularly rare is that 2 perpetrators aged 17 and 18 successfully conspired to carry out a lethal neo-Nazi-inspired firearm attack.

🚨 201 arrests in first-of-its-kind cybercrime operation in MENA region Operation Ramz brought together law enforcement agencies across the Middle East and North Africa to disrupt phishing, malware and cyber scam networks responsible for significant financial harm. Results of the operation included: 🔵 201 arrests 🔵 382 suspects identified 🔵 3,867 victims identified 🔵 53 servers seized The operation also enabled the sharing of nearly 8,000 pieces of intelligence to support ongoing investigations and strengthen regional cooperation against cyber threats. Read more ➡️🔗 interpol.int/en/News-and-Eve…

Sri Lanka has arrested more than 1,000 foreigners for cybercrime since January, up from 430 in all of 2024. Most are Chinese, Vietnamese, and Indian nationals. Networks pushed out of Cambodia and Myanmar are exploiting the 30-day tourist visa regime and setting up in rented villas and office complexes, with one raid this week pulling in 192 Indians and 29 Nepalis across Galle and Matara. channelnewsasia.com/asia/sou…

❗️🚨 Microsoft Edge keeps every saved password in process memory as cleartext from the moment it launches. Microsoft's responsed when reported: "by design." All of them. Including credentials for sites you won't open this session. Researcher @L1v1ng0ffTh3L4N tested every major Chromium browser. Edge is the only one that behaves this way. Chrome decrypts credentials on demand, and App-Bound Encryption locks the keys to an authenticated Chrome process so other processes can't reuse them. In Chrome, plaintext surfaces only during autofill or when a password is viewed, making memory scraping far less useful. What makes this extra weird is that Edge still demands re-authentication before revealing those passwords in its Password Manager UI, while the same browser process already holds every one of them in plaintext. In shared environments, this turns into a credential harvest. On a terminal server, an attacker with admin rights can read the memory of every logged-on user process. In the published PoC video, a compromised admin account lifts stored credentials from two other logged-on (and even disconnected) users with Edge running. Microsoft's official response when notified: "by design." The finding was disclosed April 29 at BigBiteOfTech by PaloAltoNtwks Norway, alongside a small educational tool that lets anyone verify the cleartext storage for themselves.

U.S. businesses and individuals were targeted and hacked by Nigerian-linked fraud organizations in an email scheme that spanned 47 states and 19 countries. In Ohio, victims were in Norwalk, Kent, Akron, Hudson, Maple Heights, Westfield Center, New Riegel, and Greenwich. Outstanding work by our USAO federal prosecutors and FBI investigators! CONVICTION DETAILS HERE: justice.gov/usao-ndoh/pr/25-… @FBICleveland

One of the 29 Sanctioned Targets Is a Cambodian Commercial Bank Heng Feng Cambodia Bank plc, a licensed NBC commercial bank with $382 million in total assets as of end-2024, is now on the OFAC SDN list. Treasury says the bank is controlled by Sai Aung Linn, a 40% shareholder, director, and former chairman who also sits on the board's risk and audit committees. Sai Aung Linn is Burmese-born and obtained Cambodian citizenship while investing in the country's scam industry, per Treasury. He's also co-owner of Xihu Resort Hotel, a sanctioned Sihanoukville casino tied to Rithy Raksmei's K99 Group. The bank's own 2024 annual report lists its Preah Sihanouk forex counter as operating from the ground floor of Xihu Resort Hotel.

New version is out!

Ransomware Negotiator selling data to the Ransomware threat actors. Not cool. justice.gov/opa/pr/florida-m…

68 Indian Nationals Arrested in Back-to-Back Pattaya Villa Raids Over $70 Million Gambling Operation Thai police hit two luxury villas in Pattaya's Nong Prue area arresting 68 Indian nationals running online gambling operations out of rented pool villas. Combined estimated annual turnover across both sites was 2.3 billion baht, roughly $70 million. The first villa, near Mabprachan reservoir, had been rented for over a year at 120,000 baht/month. Officers found 43 men working as admins for 23 gambling websites targeting Indian customers. The operation allegedly pulled in up to 5 billion rupees annually. A figure known only as "AK" is believed to have managed logistics. Hours later, immigration police raided a second villa where 25 more men were running three gambling sites with domain names ending in "777." That operation was generating about 5.6 million rupees per day. The garage had been converted into a sealed glass office hidden behind tarps, with generators and frozen food stockpiled so nobody had to leave. All 68 were on tourist visas. They've been charged with working without permits. Police say they're now going after the Thai and foreign financiers behind both networks.

More than 100 foreigners arrested in an online scam crackdown at Wyndham Grand Phnom Penh Capital building in Phnom Penh.

The 2025 Internet Crime Report from the FBI's IC3 shows that Investment Scams had 52.3% more victims than in 2024 and lost 31.6% more money. $8.6 Billion of the $20.87 Billion in losses were to Investment Scams. For the first time, MOST of the stolen funds were crypto! (54.4%) ic3.gov/AnnualReport/Reports…

As I watched last night’s game I was thinking about how Harden is now a Cavalier while James was when they first met on the court. Made me wonder what teams each had played on when the faced each other. Here’s The Beard vs The King

Following a four-year investigation, the FBI’s Eurasian Organized Crime Task Force arrested eleven people today in a title fraud case called “Operation Hard Money.” The defendants were indicted for allegedly defrauding lenders by stealing the identities of elderly victims, then using the stolen information to access title reports and solicit loans backed by the properties.

🔴 COMMANDER OF THE BASIJ UNIT ELIMINATED Yesterday, the IDF targeted & eliminated Gholamreza Soleimani, who operated as commander of the Basij unit for the past 6 years. Under Soleimani, the Basij unit led the main repression operations in Iran, employing severe violence, widespread arrests, and the use of force against civilian demonstrators.

Hundreds of Chinese Nationals Just Moved Into a Sihanoukville Building With Computers and Equipment I can't confirm exactly what's happening here, but I can confirm the building is being filled with Chinese nationals. Scam vans, loads of people going in and out, some with roller suitcases. It lines up with what this Chinese social media post is claiming, which I checked last night. According to the post, a large group of Chinese nationals moved into the Wuzhou Express Apartment Hotel (五洲快捷公寓酒店) in Sihanoukville carrying computers and equipment, effectively converting the residential hotel into an office. The group reportedly relocated from the Zhejiang Business Hotel (浙商酒店). Existing residents were told by management to vacate immediately to make room. This same area already has history. Back in December, police raided a building in Sihanoukville's Sangkat 3 and arrested five Chinese nationals and six Cambodians for allegedly grabbing a Chinese man off the street, beating him, and dragging him inside. cc-times.com/posts/30798

The Islamic State is actively expanding into northern Azerbaijan after officially establishing a new branch there in 2024. Authorities have recently thwarted multiple plots by The Islamic State's Khorasan Province to attack diplomatic and religious targets in Baku. Islamic State’s New Threats in Northern Azerbaijan (by @SaladinAlDronni for @JamestownTweets) jamestown.org/islamic-states…

Today, Treasury’s Office of Foreign Assets Control designated four sham charities that directly fund Hamas’s Military Wing and its terrorist activities. Hamas continues to rely on deceitful practices to hide its revenue-generating activities behind civilian organizations under the pretense of conducting humanitarian work, while in reality supporting the group’s continued efforts to fund their terrorist operations.

Thailand now threatening up to three years in prison for anyone caught registering "mule SIMs" on behalf of scammers. Those who broker or advertise the sale of mule SIMs face two to five years. Part of an escalating crackdown on call center fraud infrastructure. nationthailand.com/blogs/new…