A surge in attacks includes tainted JDownloader installers, deepfake sextortion targeting schools, and insider login sales by employees.