Jailbroken Gemini AI Abused in Credential Theft and Crypto Wallet Heist

Gbhackers •Divya • May 26, 2026

Jailbroken Gemini AI has been weaponised in a long-running campaign that combined political influence, credential theft, and a cryptocurrency wallet heist, all operated by a single threat actor using a fake “patriot” persona. Trend Micro researchers recently documented how a solo Russian-speaking criminal, tracked as “bandcampro,” abused a compromised Gemini setup to automate content, hacking […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Russian Hacker Exploits Jailbroken Gemini to Target MAGA Crypto Users A Russian-speaking hacker, identified as bandcampro, utilized a jailbroken Google Gemini to execute a cybercrime campaign targeting MAGA supporters from September 2025 to May 2026. The operation involved impersonating an American veteran and running a Telegram channel to distribute malware disguised as a cryptocurrency wallet. The attacker successfully compromised at least one victim's crypto wallet by stealing passwords and mnemonic phrases. The campaign leveraged AI-generated content and a brute-forcing tool to crack WordPress admin credentials. TrendAI researchers uncovered the attack infrastructure in May 2026, revealing the sophistication of the methods employed. The attack primarily aimed at cryptocurrency fraud rather than political motives, despite its MAGA-themed influence. The hacker's operational costs were minimal, relying mainly on stolen API keys. The incident highlights vulnerabilities in AI systems and the potential for exploitation in cybercrime. 7 sources 67

Jailbroken Gemini AI Abused in Credential Theft and Crypto Wallet Heist

The full story

Extracted Entities

APT Groups (1)

Tools (1)