Global crackdowns on cybercrime saw arrests, malware takedowns, and data theft charges in Week 21.Matthew D. Lane, involved in the PowerSchool attacks, agreed to plead guilty after compromising data of 70 million individuals.Infrastructure of Lumma, a widespread malware-as-a-service, was seized, hindering its data exfiltration capabilities.Europol's Operation RapTor resulted in 270 arrests across ten countries, seizing cash, crypto, drugs, and firearms.Cyberattackers exploit abandoned cloud subdomains to spread scams and malware, with 'Hazy Hawk' hijacking valuable resources.Hazy Hawk exploits forgotten DNS CNAME records to control subdomains of trusted entities, distributing malicious content.Victims clicking on malicious links are directed to scams, fake alerts, phishing pages, and adult content portals.Russian APT28 targets international aid organizations supporting Ukraine in a multi-year cyberespionage campaign.APT28 conducts attacks across various sectors using tactics like spearphishing, exploiting VPNs, and leveraging vulnerabilities.APT28 employs tactics like compromising internet-connected cameras and SOHO devices to track aid shipments and stay undetected.