← AVOID.NET
Entity Graph
Browse extracted entities, relationships, and potential duplicates.
Total entities
29,559
Relationships
32,624
Potential duplicates
0
Filter by kind
Entities (event)
↯8f02b4b8
MalwareTips publishes analysis of the campaign, adding additional confirmed phishing domains: chainbase-airdrop[.]org and chainbasedrops[.]xyz, and noting that domains change frequently.(2025-07-30:fake-chainbase-airdrop-phishing-campaign)event
↯d7f37f85
PCrisk publishes removal guide for the Chainbase Airdrop Scam, documenting chainbz[.]vip as the primary phishing domain, serving IP 104.21.80.1, and the two-stage attack methodology (wallet approval and seed phrase harvesting).(2025-07-29:fake-chainbase-airdrop-phishing-campaign)event
↯353717e0
Binance lists Chainbase $C token with spot trading pairs (C/USDT, C/BNB, C/USDC); $C surges over 230% in 24 hours, significantly raising public profile of Chainbase and likely expanding the phishing campaign's target pool.(2025-07-18:fake-chainbase-airdrop-phishing-campaign)event
↯c0f672d5
Official Chainbase Airdrop Season 1 launches at airdrop.chainbase.com; Chainbase blog explicitly warns users that all claims occur only on the official domain and to beware impersonators.(2025-07-14:fake-chainbase-airdrop-phishing-campaign)event
↯bb0ed772
Binance HODLer Airdrop snapshot window opens for Chainbase $C token (July 6–9, 2025); attacker infrastructure likely deployed around this period to capitalize on high user interest.(2025-07-06:fake-chainbase-airdrop-phishing-campaign)event
↯d5333362
ZachXBT's running tally for the mandatory-upgrade drainer campaign reaches $9 million+ across 400+ distinct victim addresses.(2026-05-30:fake-metamask-update-phishing-campaign-may-2026)event
↯4d1d2646
ZachXBT flags a cluster of drain transactions across Ethereum, Polygon, Arbitrum, and Base linked to a fake 'mandatory MetaMask 2026 system upgrade' phishing campaign; identifies a common hot-wallet gas funding source for drainer contracts on all four chains.(2026-05-28:fake-metamask-update-phishing-campaign-may-2026)event
↯cead9ef7
A real estate broker in Vijayawada, India loses approximately INR 1.4 crore (~$168,000 USD) to a separate MetaMask-related social engineering scheme involving fake investment experts and mule bank accounts; police trace one number to the UK and report a female accomplice has fled the country.(2026-05-25:fake-metamask-update-phishing-campaign-may-2026)event
↯8cab65f7
SANS Internet Storm Center researchers identify a MetaMask phishing campaign delivering emails with fake 'Security_Reports.pdf' attachments (created via ReportLab) and a malicious link to an AWS S3-hosted credential-harvest page.(2026-03-09:fake-metamask-update-phishing-campaign-may-2026)event
↯4c409447
SlowMist chief security officer '23pds' publicly warns of a separate fake-2FA MetaMask phishing campaign harvesting 12-word seed recovery phrases via counterfeit 2FA verification pages.(2026-01-05:fake-metamask-update-phishing-campaign-may-2026)event
↯82e72d82
New Year-themed phishing email impersonating MetaMask ('Happy New Year!' subject line, party-hat fox logo) delivers a fake 'mandatory 2026 system upgrade' lure and drains hundreds of small EVM wallets across Ethereum and BNB Chain; ZachXBT identifies a suspicious aggregator address with losses passing $107,000.(2026-01-03:fake-metamask-update-phishing-campaign-may-2026)event
↯7591720c
MetaMask, Phantom, WalletConnect, and Backpack join Security Alliance (SEAL) to launch a real-time global phishing defense network.(2025-10-15:fake-metamask-update-phishing-campaign-may-2026)event
↯767f770c
Trust Wallet's reimbursement claim submission deadline. Approximately 95% of claims for affected funds reported received, with remaining claims under review.(2026-02-14:trust-wallet-chrome-extension-hack-december-2025)event
↯f062237e
BleepingComputer identifies attacker-registered follow-on phishing domain fix-trustwallet.com impersonating Trust Wallet's remediation guidance to harvest seed phrases from victims.(2026-01-01:trust-wallet-chrome-extension-hack-december-2025)event
↯0ddb6761
Unicoin serves as 'platinum' sponsor at the Digital Chamber's DC Blockchain Summit, at which SEC Chairman Paul Atkins is a headlining speaker. CEO Konanykhin also appears on the speaker roster. Case remains pending.(2026-02-24:unicoin-alex-konanykhin-silvina-moschini)event
↯b2d4b6b6
Trust Wallet publishes official incident statement on its blog detailing attack vector, scope, remediation actions, and reimbursement process.(2025-12-30:trust-wallet-chrome-extension-hack-december-2025)event
↯5eadf2d9
Unicoin files a motion to dismiss the SEC's complaint, arguing the agency distorted filings, cherry-picked communications, and conflated contractual commitments with completed asset transfers.(2025-08-01:unicoin-alex-konanykhin-silvina-moschini)event
↯253b2ee3
Trust Wallet CEO Eowyn Chen publicly confirms 2,596 affected wallet addresses, approximately $7 million in losses, and voluntary reimbursement commitment. New Shai-Hulud repository creation drops to a handful per day.(2025-12-29:trust-wallet-chrome-extension-hack-december-2025)event
↯948aad82
SEC files civil complaint (Case No. 1:25-cv-4245, SDNY) against Unicoin, Inc., Alexander Konanykhin, Maria Silvina Moschini, Alejandro Dominguez, and Richard Devlin. Devlin simultaneously settles for a $37,500 civil penalty without admitting liability.(2025-05-20:unicoin-alex-konanykhin-silvina-moschini)event
↯77cbd6a7
Shai-Hulud 3.0 variant discovered, incorporating TruffleHog for credential scanning and removing the 'dead man switch' wiper functionality present in earlier versions.(2025-12-28:trust-wallet-chrome-extension-hack-december-2025)event
↯1fd750ba
CEO Konanykhin publicly announces Unicoin's rejection of the SEC's settlement approach.(2025-04-22:unicoin-alex-konanykhin-silvina-moschini)event
↯c8a42b7c
Trust Wallet issues emergency user alert and releases clean patch v2.69 (functionally v2.67 code). Exfiltration window closes at approximately 11:00 UTC per Trust Wallet's official statement. CoinDesk publishes first major media coverage.(2025-12-26:trust-wallet-chrome-extension-hack-december-2025)event
↯e6f17fcb
Unicoin declines to attend a settlement negotiation meeting with the SEC, which Konanykhin later describes as having presented 'unacceptable' pre-conditions.(2025-04-18:unicoin-alex-konanykhin-silvina-moschini)event
↯8d01815f
On-chain investigator ZachXBT flags wallet-draining activity via Telegram, identifying attacker-controlled addresses receiving funds from hundreds of victims. Trust Wallet's security team and analytics partners independently flag the activity.(2025-12-25:trust-wallet-chrome-extension-hack-december-2025)event
↯0f91d9d9
Unicoin, Konanykhin, Moschini, Dominguez, and Devlin file a joint Wells Submission disputing the proposed charges.(2024-12-31:unicoin-alex-konanykhin-silvina-moschini)event
↯4bc25094
Malicious Trust Wallet Chrome extension v2.68 submitted and published to Chrome Web Store at 12:32 UTC using the stolen CWS API key. Google's automated review passes the build. Wallet-draining begins as users unlock wallets.(2025-12-24:trust-wallet-chrome-extension-hack-december-2025)event
↯d2b801c8
SEC Staff issues Wells Notices to Unicoin, Inc., Alex Konanykhin, Silvina Moschini, Alejandro Dominguez, and Richard Devlin, signaling intent to recommend an enforcement action for fraud, deceptive practices, and unregistered securities offerings.(2024-12-10:unicoin-alex-konanykhin-silvina-moschini)event
↯a7a44519
First observed outbound request to api.metrics-trustwallet.com, indicating the attacker was testing or warming up the exfiltration endpoint.(2025-12-21:trust-wallet-chrome-extension-hack-december-2025)event
↯5aba04ad
By this date, Unicoin publicly claimed to have sold more than $3 billion in rights certificates. The SEC later alleges actual sales never exceeded $110 million.(2024-06-01:unicoin-alex-konanykhin-silvina-moschini)event
↯a5d7eae1
Microsoft Security Blog publishes Shai-Hulud 2.0 detection and defense guidance, indicating broad industry awareness of the credential-theft campaign.(2025-12-09:trust-wallet-chrome-extension-hack-december-2025)event
↯6b3b4f89
Unicoin begins announcing property acquisitions in Argentina, Thailand, Antigua, and the Bahamas, claiming purported appraised values totaling more than $1.4 billion. The SEC later alleges most transactions never closed and actual combined value was no more than $300 million.(2023-09-01:unicoin-alex-konanykhin-silvina-moschini)event
↯848f2a7d
Attacker registers domain metrics-trustwallet.com (and subdomain api.metrics-trustwallet.com) at 02:28:18 UTC via registrar NICENIC INTERNATIONAL, pre-staging exfiltration infrastructure more than two weeks before deployment.(2025-12-08:trust-wallet-chrome-extension-hack-december-2025)event
↯d6b98eaf
CEO Alex Konanykhin publicly offers a $1 million bounty for the arrest of Vladimir Putin following Russia's invasion of Ukraine.(2022-03-01:unicoin-alex-konanykhin-silvina-moschini)event
↯fa7848e1
Shai-Hulud 2.0 campaign peaks: over 640 npm packages infected and more than 25,000 malicious data-leaking GitHub repositories created. Trust Wallet's developer GitHub secrets, including its Chrome Web Store API key, are exposed in the campaign.(2025-11-24:trust-wallet-chrome-extension-hack-december-2025)event
↯03c285d0
Unicoin, Inc. launches Unicoin Rights Certificates, marketing them as convertible IOUs for future tokens backed by real-world assets. The offering is tied to the 'Unicorn Hunters' TV show.(2022-02-01:unicoin-alex-konanykhin-silvina-moschini)event
↯b1b3d650
Initial Shai-Hulud npm supply chain worm first observed targeting the npm ecosystem, harvesting developer credentials.(2025-09-01:trust-wallet-chrome-extension-hack-december-2025)event
↯8b0f3b08
TransparentBusiness reportedly reaches a $1 billion valuation, with Moschini described by media as the first Latin American woman to lead a company to unicorn status.(2020-01-01:unicoin-alex-konanykhin-silvina-moschini)event
↯79d78504
Silvina Moschini co-founds TransparentBusiness, a remote workforce management software company, which later rebrands as Unicoin, Inc.(2012-01-01:unicoin-alex-konanykhin-silvina-moschini)event
↯0939af6c
CryptoDaily publishes analysis describing address poisoning as a commercialized industry with Telegram-based service offerings, and noting that no named threat actors have been publicly identified or prosecuted.(2026-04-01:mass-address-poisoning-campaign-ethereum-2025-2026)event
↯15406079
Coin Metrics publishes State of the Network Issue 349, quantifying post-Fusaka dust transaction impact: ~11% of all Ethereum transactions, ~26% of active addresses daily attributable to stablecoin dust activity.(2026-02-09:mass-address-poisoning-campaign-ethereum-2025-2026)event
↯756cfd74
ScamSniffer publishes report disclosing combined $62.25 million in address poisoning losses across December 2025 and January 2026.(2026-02-08:mass-address-poisoning-campaign-ethereum-2025-2026)event
↯08bb54ca
Blockaid records approximately 3.4 million poisoning attempts in January 2026, a 5.5x increase from November 2025's 628,000, and the highest monthly total documented.(2026-01-31:mass-address-poisoning-campaign-ethereum-2025-2026)event
↯a12e299b
Victim loses 4,556 ETH (approximately $12.4 million) after copying an OTC deposit address from transaction history. Attacker had conducted a two-month preparatory dusting campaign from December 2025 onward, using a vanity address matching both prefix and suffix of the legitimate address.(2026-01-30:mass-address-poisoning-campaign-ethereum-2025-2026)event
↯d0c84a5c
Safe{Wallet} nested Safe poisoning campaign identified as active from at least this date. Attackers bulk-created approximately 15,000 malicious proxy addresses exploiting Safe's nested Safe feature.(2026-01-26:mass-address-poisoning-campaign-ethereum-2025-2026)event
↯87b4800e
Ethereum sets a new daily transaction record of 2.89 million transactions, a post-Fusaka peak partly attributable to address poisoning dust traffic.(2026-01-16:mass-address-poisoning-campaign-ethereum-2025-2026)event
↯c36b2adf
Binance co-founder Changpeng Zhao (CZ) publishes a call for all wallets to implement default address-poisoning detection, block known poison addresses, and participate in shared industry blacklists.(2025-12-24:mass-address-poisoning-campaign-ethereum-2025-2026)event
↯22c59c20
CoinDesk and Web3 Antivirus publicly disclose the $50 million USDT address poisoning theft.(2025-12-20:mass-address-poisoning-campaign-ethereum-2025-2026)event
↯32715b1c
Unnamed victim loses $49,999,950 USDT in the largest recorded single address poisoning theft. Attacker detected a $50 test transaction, inserted a spoofed address into transaction history, and received the full transfer 26 minutes later. Stolen funds laundered via Tornado Cash within approximately 30 minutes.(2025-12-19:mass-address-poisoning-campaign-ethereum-2025-2026)event
↯aa418e1e
Ethereum Fusaka upgrade activates, reducing transaction fees approximately sixfold and removing the primary economic barrier to mass-scale address poisoning campaigns.(2025-12-03:mass-address-poisoning-campaign-ethereum-2025-2026)event
↯37e5c495
Blockaid records approximately 628,000 poisoning attempts in November 2025, representing the pre-Fusaka baseline.(2025-11-01:mass-address-poisoning-campaign-ethereum-2025-2026)event
Data refreshes within about 10 minutes · All metrics derived from Supabase