← AVOID.NET
Entity Graph
Browse extracted entities, relationships, and potential duplicates.
Total entities
29,475
Relationships
32,557
Potential duplicates
0
Filter by kind
Entities (event)
↯9ce425d4
Yaroch queries ChatGPT about how to invest approximately $1 million for maximum profit, per forensic analysis of his iPhone subsequently recovered by investigators.(2026-05-28:patrick-steven-yaroch-fbi-agent-crypto-theft)event
↯2fb94884
Yaroch transfers from the FBI Boston Field Office to the Counterintelligence and Espionage Division at FBI headquarters in Washington, D.C., while allegedly continuing to hold and manage the stolen cryptocurrency.(2025-02-01:patrick-steven-yaroch-fbi-agent-crypto-theft)event
↯8cd38f41
Alleged unauthorized transfers begin. Yaroch allegedly accesses FBI systems to extract seed phrases and private keys for cryptocurrency wallets tied to the active investigation, memorizes the credentials, and begins transferring funds to personal wallets. Approximately 10 to 12 transfers are alleged to have been made.(2024-12-01:patrick-steven-yaroch-fbi-agent-crypto-theft)event
↯eef54196
Yaroch is exposed to adversarial cryptocurrency wallet credentials in the course of his FBI duties at the Boston field office. He later alleges this is the point at which he became 'frustrated' the FBI would not act against the accounts.(2024-11-01:patrick-steven-yaroch-fbi-agent-crypto-theft)event
↯e9f8c1bb
Patrick Steven Yaroch joins FBI Boston Field Office and is assigned to a national security squad investigating cryptocurrency accounts linked to an adversarial foreign nation, later identified as Russia.(2017-01-01:patrick-steven-yaroch-fbi-agent-crypto-theft)event
↯9b760114
Updated Quark Drainer advertisement posted on crdweb.cc advertising support for 440+ wallets, 90+ networks, EVM, Solana, TON, TRON, XRP; 400+ landing pages; and a private community of 200+ users. Price remains $5,000.(2026-07-09:quark-drainer)event
↯bfca4d3c
Blockaid publishes findings identifying Quark Lab as the most prolific drainer operation in its tracking dataset, noting support for 70+ blockchains and 480 wallets. Airdrop phishing templates targeting new chain launches are specifically called out.(2026-01-01:quark-drainer)event
↯477a4f66
Security Alliance publishes State of Drainers Vol. 1, documenting the broader drainer ecosystem including operators such as Inferno, Rublevka, Eleven, and Vanilla. Quark Lab is tracked as active during this period by Blockaid.(2025-10-01:quark-drainer)event
↯7ee92357
KELA Cyber reports underground market chatter for macOS infostealers, including Quark Stealer, peaked in 2025. The broader wallet drainer market recorded $84 million in losses for the full year — an 83% decline from 2024 — while Quark Lab continued active operations.(2025-01-01:quark-drainer)event
↯552c6d69
Intel 471 documents Quark Lab actor offering a combined Malware-as-a-Service package including the drainer and a cross-platform infostealer (Quark Stealer) targeting macOS, priced at $3,000/month for the infostealer component.(2024-04-01:quark-drainer)event
↯4aab8b99
Earliest confirmed forum advertisement for Quark Drainer appears on ewebdiscussion.com, listing $5,000 pricing, EVM chain support, and Seaport/Permit2 capabilities. A $4,000 holiday discount was promoted for November 15, 2023.(2023-11-02:quark-drainer)event
↯b6e1204a
BitMEX final closure date; users failing to withdraw by this date face ongoing asset fees(2026-09-23:h1-2026-crypto-project-shutdown-wave-100-projects)event
↯60282d29
Crypto Times publishes comprehensive list: 100+ confirmed crypto project shutdowns in H1 2026 from BitMEX to Leap Wallet(2026-08-04:h1-2026-crypto-project-shutdown-wave-100-projects)event
↯686b5c23
Blockaid publishes H1 2026 security report: 212 exploits, $1.1–$1.32B in total losses, most-hacked half-year on record(2026-07-29:h1-2026-crypto-project-shutdown-wave-100-projects)event
↯f754c8ad
BitMart announces orderly wind-down(2026-07-26:h1-2026-crypto-project-shutdown-wave-100-projects)event
↯ddfab4e0
BitMEX announces permanent closure effective September 23, 2026; new account registrations halted immediately(2026-07-23:h1-2026-crypto-project-shutdown-wave-100-projects)event
↯745affd6
Movement Labs bankruptcy filing publicly confirmed and reported; Chapter 11 petition lists assets $100K–$500K against up to $10M in liabilities(2026-07-21:h1-2026-crypto-project-shutdown-wave-100-projects)event
↯8268961d
Movement Labs (MOVE token) files Chapter 11 bankruptcy in U.S. Bankruptcy Court, District of Delaware; MOVE token at approximately $0.01, down ~99% from December 2024 high(2026-07-15:h1-2026-crypto-project-shutdown-wave-100-projects)event
↯dbd2f828
Polygon zkEVM (backed by $250M Hermez acquisition in 2021) officially shuts down; AscendEX centralized exchange also ceases operations(2026-07-01:h1-2026-crypto-project-shutdown-wave-100-projects)event
↯719f8534
Loopring (Ethereum zk-rollup DEX, formerly $760M TVL) shuts down all trading and relayer operations; LRC token at approximately $0.01(2026-06-28:h1-2026-crypto-project-shutdown-wave-100-projects)event
↯c560b78c
Leap Wallet (Cosmos ecosystem) shuts down; multiple other wallets (Family, Ctrl) also cease operations in same period(2026-05-28:h1-2026-crypto-project-shutdown-wave-100-projects)event
↯a6828b33
Dmail Network ceases all services(2026-05-15:h1-2026-crypto-project-shutdown-wave-100-projects)event
↯895c496b
Dmail Network (decentralized email, 5 years of operation) announces phased shutdown beginning May 15, citing infrastructure costs and failed monetization(2026-04-03:h1-2026-crypto-project-shutdown-wave-100-projects)event
↯333aa2cd
Nifty Gateway officially closes; withdrawal deadline passes(2026-02-23:h1-2026-crypto-project-shutdown-wave-100-projects)event
↯583cc4f8
ZeroLend DeFi lending protocol shuts down after 3 years, citing inactive chains, thin margins, and hacks(2026-02-17:h1-2026-crypto-project-shutdown-wave-100-projects)event
↯b8bd41cd
Nifty Gateway (Gemini-owned NFT marketplace, $300M peak GMV) announces closure; platform enters withdrawal-only mode(2026-01-24:h1-2026-crypto-project-shutdown-wave-100-projects)event
↯6adad475
OFAC designates HormuzSafe Marine Services Authority and Persian Gulf Marine Insurance Company (PGMIC) as SDNs under E.O. 13902, alongside eight shadow-fleet tankers and eight associated management companies.(2026-07-29:hormuzsafe-marine-services-authority-persian-gulf-marine-insurance-company-pgmic)event
↯d5a1100f
Tether freezes approximately $131 million in USDT linked to cryptocurrency wallets sanctioned as part of the broader Iran maximum-pressure campaign.(2026-07-01:hormuzsafe-marine-services-authority-persian-gulf-marine-insurance-company-pgmic)event
↯6abdf9dd
OFAC designates the Persian Gulf Strait Authority (PGSA) as an IRGC-linked entity engaged in terrorism financing.(2026-05-27:hormuzsafe-marine-services-authority-persian-gulf-marine-insurance-company-pgmic)event
↯4ce3cd53
CoinDesk first publicly reports on HormuzSafe and the planned Iran Bitcoin maritime insurance scheme.(2026-05-18:hormuzsafe-marine-services-authority-persian-gulf-marine-insurance-company-pgmic)event
↯a6fe632b
Islamic Republic of Iran founds the Persian Gulf Strait Authority (PGSA) as a legal authority for managing Strait of Hormuz transit, coordinated with IRGC Navy.(2026-05-05:hormuzsafe-marine-services-authority-persian-gulf-marine-insurance-company-pgmic)event
↯17fc5444
Operation Epic Fury begins: U.S.-Israeli military strikes on Iran disrupt oil revenue, reportedly prompting the regime to seek alternative hard-currency income streams.(2026-02-28:hormuzsafe-marine-services-authority-persian-gulf-marine-insurance-company-pgmic)event
↯c32fe885
GBHackers and Infosecurity Magazine publish coverage of the active ClickFake Interview campaign deploying PylangGhost and GolangGhost RATs.(2026-07-22:famous-chollima-clickfake-interview-campaign-pylangghost-golangghost)event
↯401b4272
SOCRadar Threat Research Unit publishes updated analysis of the ClickFake Interview campaign documenting PylangGhost and GolangGhost targeting Web3 professionals, with new infrastructure observations including Nuitka-compiled variants.(2026-07-20:famous-chollima-clickfake-interview-campaign-pylangghost-golangghost)event
↯d75ed6d2
Microsoft Security Blog publishes detailed analysis of the Contagious Interview malware delivery campaign including BeaverTail, InvisibleFerret, and related tooling.(2026-03-11:famous-chollima-clickfake-interview-campaign-pylangghost-golangghost)event
↯7abcf16a
Cisco Talos identifies PylangGhost, a Python-based Windows RAT functionally equivalent to GolangGhost, marking a new malware family exclusive to Famous Chollima in the ClickFake campaign.(2025-05-01:famous-chollima-clickfake-interview-campaign-pylangghost-golangghost)event
↯46f7d010
Sekoia publicly releases ClickFake Interview research; The Hacker News and Infosecurity Magazine cover findings. Campaign linked to 40+ companion domains registered in April 2025.(2025-04-01:famous-chollima-clickfake-interview-campaign-pylangghost-golangghost)event
↯79cc2156
Sekoia distributes private FLINT report codenaming the evolved campaign ClickFake Interview, documenting GolangGhost, FrostyFerret, and the shift to ClickFix social engineering and CeFi targeting.(2025-03-21:famous-chollima-clickfake-interview-campaign-pylangghost-golangghost)event
↯dd6a9b3e
FBI IC3 releases public service announcement attributing the Bybit theft to North Korea's Lazarus Group (TraderTraitor) and publishing 52 associated Ethereum wallet addresses.(2025-02-26:famous-chollima-clickfake-interview-campaign-pylangghost-golangghost)event
↯73437e84
Lazarus Group (TraderTraitor) steals approximately $1.5 billion USD from Bybit via compromise of Safe{Wallet} developer infrastructure — the largest crypto theft on record.(2025-02-21:famous-chollima-clickfake-interview-campaign-pylangghost-golangghost)event
↯0820af2e
Campaign evolves; GolangGhost backdoor and FrostyFerret macOS stealer first observed in ongoing fake interview operations.(2024-06-01:famous-chollima-clickfake-interview-campaign-pylangghost-golangghost)event
↯0b625135
Palo Alto Networks publicly documents the Contagious Interview campaign for the first time.(2023-11-01:famous-chollima-clickfake-interview-campaign-pylangghost-golangghost)event
↯ac82f1ac
Contagious Interview campaign begins, targeting software developers via fake GitHub-hosted coding assessments. Attributed to Famous Chollima / Lazarus Group.(2022-12-01:famous-chollima-clickfake-interview-campaign-pylangghost-golangghost)event
↯df47cf31
Additional security outlets including The Hacker News and CyberSecurityNews publish further analysis. No confirmed losses or attacker attribution published.(2026-08-01:adform-ad-tech-supply-chain-wallet-swap-attack)event
↯dbd0417b
Multiple security outlets including BleepingComputer, WebProNews, and SC Media publish detailed coverage of the incident. Kevin Beaumont's DoublePulsar write-up noted as a primary disclosure source.(2026-07-30:adform-ad-tech-supply-chain-wallet-swap-attack)event
↯6bd14e5c
Adform reports the incident to authorities (agencies not identified). Company advises customers and users to clear browser cache and verify wallet addresses before any cryptocurrency transactions.(2026-07-27:adform-ad-tech-supply-chain-wallet-swap-attack)event
↯24b0abc3
Alleged earliest possible start date of compromise, based on researcher Kevin Beaumont's observation that malicious activity extended approximately one week before the official July 27 detection date. Exact start date unconfirmed.(2026-07-20:adform-ad-tech-supply-chain-wallet-swap-attack)event
↯d150b27a
Aurum Foundation announces it was 'hacked,' claiming attackers gained unauthorized access to user funds during infrastructure migration. Investigative reporting characterizes this as an exit-scam pretext.(2026-07-30:aurum-foundation)event
↯47c76ef1
The neyro.network domain is seized by Ukrainian registrar QHost.(2026-07-29:aurum-foundation)event
↯43d65e48
Withdrawals disabled entirely; platform cites a 'system update.'(2026-07-27:aurum-foundation)event
Data refreshes within about 10 minutes · All metrics derived from Supabase