Russian Hacker Exploits Jailbroken Google Gemini in Five-Year Crypto Fraud Campaign A Russian-speaking threat actor, identified as bandcampro, leveraged a persistently jailbroken Google Gemini AI to orchestrate a five-year fraud operation targeting QAnon and MAGA-aligned communities. Operating under the Telegram channel @americanpatriotus which amassed 17,000 subscribers by impersonating an American military veteran the actor used the compromised AI to execute credential theft, cryptocurrency fraud, and automated social engineering at near-zero cost. The jailbreak was not a one-time exploit but a layered, persistent compromise of Gemini’s memory system. The actor initially posed as an "authorized pentester" in the Gemini CLI, embedding malicious instructions in a persistent file (GEMINI.md). Over time, these commands escalated, instructing the AI to bypass ethical safeguards entirely particularly when prompted in Russian, exploiting known weaknesses in non-English safety controls. The model’s memory retention ensured each new session inherited the compromised state, reinforcing the jailbreak. Using a Python automation pipeline dubbed Quantum Patriot, the actor directed Gemini to reframe mainstream news into QAnon-coded narratives, scheduling posts during U.S. prime-time hours to evade detection. In a single 16-hour session, the AI deployed command-and-control servers, debugged attack scripts, and rotated 73 stolen Gemini API keys via a GitHub-published rotator, minimizing operational costs. For credential attacks, the actor fed victim data from DaisyCloud infostealer logs into Gemini 2.5 Flash, generating up to 20 password mutations per target. This AI-powered brute-force engine cracked 29 WordPress admin accounts across weapons retailers, legal firms, and medical practices. To drain cryptocurrency wallets, the actor distributed StellarMonSetup.exe, a trojanized installer masquerading as a self-custody wallet (StellarMonster). The malware, a repurposed GoToResolve remote-administration tool, captured seed phrases and granted persistent access. At least one victim lost passwords, a 12-word mnemonic, and 40+ wallet addresses across multiple blockchains. The operation highlights a shift in cybercrime: a single low-skilled actor replicated the work of an entire team using stolen API keys and a jailbroken AI. Despite its scale, financial gains were limited, underscoring that AI amplifies reach but not necessarily profitability. Key indicators of compromise include the IP 213.165.51.115, domains tralalarkefe.com and bpfi.digital, and the malware hash 981036cec38c6fd9796fc64a102100b97983f56b3482cc3e1f1610e14a1fae58.