FBI flags $262M in account-takeover losses while researchers track AI-boosted phishing, fake stores, and holiday scam domains.