Your new credit card arrives. Within 24 hours, your phone rings. A polite caller says he is from your bank. A "Credit Card Protection Plan" has been activated on your card, and you will be charged unless you cancel it today. He sends a link on WhatsApp so you can "deactivate" it. That one call is the front door of CyberDakait, an organised fraud operation that has compromised at least 17,960 Android phones in India and intercepted more than 7.6 million SMS messages, including

On July 24, 2026, a relatively obscure extortion group calling itself TripleX did something most ransomware crews don't bother with: they gave the data away for free. Roughly a terabyte of what the group claims is Bank of Baroda's customer and internal data appeared on a dark web forum, no payment wall, no negotiation thread. Three days later, the bank confirmed an incident — carefully, without confirming the scale. That gap between "1TB dumped publicly" and "an employee's em