Tokyo police have arrested a 15-year-old high school student on suspicion of launching cyber-attacks against Bandai Channel, a streaming service operated by a subsidiary of Bandai Namco Holdings.

The teenager, from Tokorozawa in Saitama Prefecture, is accused of using a custom-built software tool to exploit a vulnerability in the company's servers. Authorities believe he improved the software with generative AI before using it to carry out the attacks.

According to police, the incident resulted in more than 46,000 Bandai Channel memberships being canceled without customers' consent, causing significant disruption to the company's operations. The service was forced offline for more than a month while the company addressed the breach and issued refunds to affected users.

L'élève avait déjà été arrêté en juin, soupçonné d'avoir accédé au compte d'une autre personne dans le cadre de l'enquête. La police a indiqué que l'adolescent avait reconnu les faits et déclaré qu'il n'avait aucune rancune envers l'entreprise.

A major anti-fraud op results in 5,811 arrests

Law enforcement agencies have arrested 5,811 suspects and seized $293 million in illicit assets during Interpol-coordinated Operation First Light 2026, a global anti-fraud initiative spanning 97 countries.

The operation, conducted between January 15 and April 30, targeted social engineering scams, including business email compromise (BEC), romance, investment, impersonation, and sextortion schemes, as well as money laundering networks. Law enforcement officers analyzed 152,808 cases, identified more than 142,000 victims worldwide, blocked 31,014 bank accounts, and identified 15,606 suspects.

In Eswatini, police arrested 82 suspects and dismantled a criminal network involved in illegal online gambling, money laundering, and impersonation scams.

Two suspects were arrested in Thailand linked to a money laundering network that converted proceeds from romance scams into cryptocurrencies using cross-chain token swaps to conceal the movement of funds.

Authorities in Singapore and Oman blocked a $6.6 million transfer connected to a BEC scheme. Also, 22 individuals were deported from Palau for their alleged involvement in operating two interconnected scam centers based in local hotels.

Spanish police arrest a suspected hacktivist linked to the pro-Russian CARR and Z-Pentest groups

Spanish National Police have arrested a man in Palencia on suspicion of supporting the pro-Russian hacktivist groups, known as CyberArmy of Russia Reborn (CARR) and Z-Pentest.

Le groupe CARR a été associé à des cyberattaques ciblant les infrastructures critiques aux États-Unis et en Europe, y compris les installations d'eau, de transformation alimentaire et d'énergie. En juillet 2024, les autorités américaines ont sanctionné deux membres présumés de CARR (un chef de groupe et un hacker clé) pour leur implication dans des opérations ciblant les infrastructures critiques américaines.

According to authorities, the suspect provided logistical and operational support to a Ukrainian hacker linked to CARR and helped plan an escape route to Russia via Poland and Belarus.

Authorities allege that the suspect communicated with other members via encrypted messaging platforms and was involved in operations attributed to the pro-Russian hacktivist collective called NoName057(16). Authorities said the group's activities were later promoted online to amplify pro-Russian and anti-Western narratives.

The investigation began in August 2025 after Spanish authorities received intelligence from the US Federal Bureau of Investigation (FBI). In March 2026, police searched the suspect's home in Palencia, seizing computers and cryptocurrency storage devices. Authorities also froze digital wallets allegedly used to receive proceeds from the sale of stolen data.

The suspect remains under investigation and has not been formally charged. Spanish police said he is being investigated for alleged membership in and collaboration with a terrorist organization, glorification of terrorism, and computer-related offenses.

Par ailleurs, les autorités taïwanaises ont inculpé deux hommes d’affaires qui avaient fourni des comptes de messagerie LINE à des cyberespions chinois. Ces comptes ont été utilisés dans le cadre d’une campagne de cyberespionnage visant les secteurs politique et académique de Taïwan.

Vietnam arrests seven suspects behind HiAnime in a major anime piracy crackdown

Les autorités vietnamiennes ont arrêté et inculpé sept suspects accusés d'avoir exploité HiAnime, la plus grande plateforme mondiale de streaming d’anime piratés, qui a été fermée en juin 2026.

The suspects face charges of copyright infringement, related rights violations, and money laundering. Prosecutors allege the group operated more than 100 piracy websites, distributing over 26,000 unauthorized anime titles and generating an estimated $12.85 million in advertising revenue between 2020 and April 2026. Four suspects remain in custody, while the other three have been placed under house arrest pending further legal proceedings.

HiAnime was of the most-visited anime streaming sites, offering free access to a vast catalog of English-subbed and dubbed content. Originally launched as Zoro[.]to, the platform rebranded to Aniwatch in 2023 before adopting the HiAnime name in 2024. At its peak, it attracted hundreds of millions of monthly visitors.

Earlier this year, the Alliance for Creativity and Entertainment (ACE) announced the shutdown of AnimePlay, another major piracy platform that hosted more than 60 terabytes of anime content and served over five million registered users.

Obtenir une démonstration

ImmuniWeb peut vous aider à prévenir les violations de données et à respecter les exigences réglementaires.

Belgian police arrest a 19-year-old alleged leader of a major European phishing gang

Belgian federal police have arrested a 19-year-old man from Antwerp on suspicion of leading a large-scale phishing network that targeted victims across Europe.

Les autorités allèguent que le suspect était le cerveau de l'opération, basée en Belgique et aux Pays-Bas. Les membres du gang se seraient fait passer pour des employés de banque, envoyant des e-mails frauduleux et passant des appels téléphoniques pour inciter les victimes à installer un logiciel d'accès à distance. Cela a permis aux escrocs de prendre le contrôle des ordinateurs des victimes et d'accéder à leurs comptes bancaires.

Authorities say the scheme defrauded dozens of victims of more than €500,000. The stolen funds were allegedly transferred through money mules and cashers and then laundered using cryptocurrency. Police say the suspect organized both the digital fraud and the money laundering operation. Authorities also allege he traveled to Dubai several times using bank cards stolen from victims to purchase airline tickets.

The suspect was arrested after returning from Dubai at the end of June. Officers detained him at an Airbnb in Antwerp, where he was staying with another individual. Police have not disclosed why the second person was not arrested.