A massive escalation in the Galaktika N.V. fraud case reveals that stolen KYC data is being used to create "Shadow Skrill" accounts. Victims are lured via fake Google Play Store interfaces into downloading malicious APKs, while their identities are laundered through a web of shell companies including Cyperion Solutions and Novaforge.