Skip to main content
AVOID.NET
← AVOID.NET

Entity Graph

Browse extracted entities, relationships, and potential duplicates.

Total entities
29,211
Relationships
32,356
Potential duplicates
0

Entities (event)

↯
Hemi mainnet launched, positioning the protocol as a Bitcoin-Ethereum supernetwork L2 built on the OP Stack.(2025-03-12:hemi-genesis-drop-merklebox-exploit)event
93cdd382
↯
All malicious subdomains from the September 14 Cloudflare Worker attack stopped resolving. Brevo's JavaScript files were confirmed clean.(2026-09-15:trezor-email-provider-breach-brevo-september-2026)event
3ba9c530
↯
In a separate secondary attack, attackers used a hardcoded Cloudflare API key to deploy a malicious Cloudflare Worker on Brevo's domains and customer-embedded JavaScript files between approximately 16:05 and 20:13 UTC, injecting ClickFix malware and WordPress backdoor payloads across an estimated 100,000+ customer websites.(2026-09-14:trezor-email-provider-breach-brevo-september-2026)event
81a90053
↯
Solana Mobile confirmed it had suspended its Brevo marketing email account following unauthorized access.(2026-09-13:trezor-email-provider-breach-brevo-september-2026)event
aa8427e6
↯
Solana Mobile disclosed that its Brevo marketing email account had been accessed without authorization as part of the same Brevo incident and warned users of elevated phishing risk.(2026-09-12:trezor-email-provider-breach-brevo-september-2026)event
493daf57
↯
Mailchimp, a prior Trezor email marketing provider, suffered a social engineering attack that exposed approximately 100 Trezor user accounts and enabled a targeted phishing campaign.(2022-04-01:trezor-email-provider-breach-brevo-september-2026)event
05b13917
↯
Trezor updated its disclosure to confirm 347,149 total marketing contacts were affected by the Brevo breach. No confirmed cryptocurrency losses from the phishing campaign were reported as of this date.(2026-09-17:trezor-email-provider-breach-brevo-september-2026)event
249b4343
↯
TechCrunch reported that Trezor confirmed the Brevo data breach and described it as the second data breach of a Trezor third-party vendor within weeks.(2026-09-11:trezor-email-provider-breach-brevo-september-2026)event
067c2f26
↯
Brevo detected the SSO access at 6:30 AM UTC and closed the attack vector by 8:30 AM UTC. Trezor disabled the phishing domain within approximately 20 minutes of detection, by which time approximately 2,500 users had clicked the malicious link. Brevo force-signed out all platform users and deployed a permanent SSO scope-restriction fix.(2026-09-10:trezor-email-provider-breach-brevo-september-2026)event
e60aec0f
↯
Attackers exploited Brevo's SAML SSO misconfiguration, accessed 138 Brevo customer accounts, and sent phishing emails to approximately 347,149 Trezor newsletter subscribers. The emails used the subject line 'Critical Security Alert: STM32 Entropy Vulnerability' and directed recipients to a malicious application requesting seed phrase entry.(2026-09-09:trezor-email-provider-breach-brevo-september-2026)event
fdb96113
↯
Trezor updated its ShipMonk breach disclosure, with the affected customer count eventually reaching approximately 81,000.(2026-09-04:trezor-email-provider-breach-brevo-september-2026)event
80a5b8b0
↯
Trezor was informed that the ShipMonk breach's scope was substantially larger than first disclosed.(2026-09-02:trezor-email-provider-breach-brevo-september-2026)event
ef1e72c7
↯
Trezor publicly disclosed the ShipMonk breach, initially reporting approximately 13,689 affected customers with names, emails, phone numbers, and shipping addresses exposed.(2026-08-13:trezor-email-provider-breach-brevo-september-2026)event
06bd63b7
↯
ShipMonk, Trezor's shipping and logistics vendor, notified Trezor that customer data was exposed via a Metabase SQL injection zero-day (CVE-2026-72898, CVSS 10.0).(2026-08-10:trezor-email-provider-breach-brevo-september-2026)event
846b98a1
↯
Cybersecurity firm Hudson Rock reported approximately 300 compromised pec.interno.it webmail credentials in its database, suggesting the attackers obtained access via infostealer-harvested credentials rather than directly targeting government employees.(2026-09-17:revolut-data-breach-fake-government-request-september-2026)event
9c939cf5
↯
Additional reporting identified the compromised email account as associated with the pec.interno.it domain (Italy's Ministry of the Interior PEC system), specifically the Prefecture of Reggio Calabria. Hackers also claimed to have extracted 147GB of data from Italian law enforcement systems.(2026-09-16:revolut-data-breach-fake-government-request-september-2026)event
3c1e685e
↯
Revolut publicly confirmed the breach to TechCrunch and other outlets, describing 'a sophisticated external impersonation scam' using a legitimate government agency email domain. ZachXBT flagged the customer notification on the same day and assessed it as a targeted high-net-worth operation.(2026-09-12:revolut-data-breach-fake-government-request-september-2026)event
7c79d20d
↯
Affected Revolut customers began receiving breach notification emails disclosing that their personal and financial data may have been shared with an unauthorized third party.(2026-09-11:revolut-data-breach-fake-government-request-september-2026)event
ad46fdd8
↯
Approximate start of the fraudulent data request campaign, based on reporting that the operation ran for approximately five months before discovery. The attackers allegedly used a compromised pec.interno.it email account to submit fraudulent law enforcement requests to Revolut Bank UAB.(2026-04-01:revolut-data-breach-fake-government-request-september-2026)event
7362de82
↯
OFAC designates BitBank (also known as BitBank3), Pishtaz Simorgh Electronic Trade Company, Mohammad Mahdi Zaker Hossein, Seyed Adel Heidari, and Hossein Ali Zaker Hossein under Executive Order 13902 as part of Operation Economic Outcast.(2026-09-17:bitbank-iranian-crypto-exchange)event
73e83ac0
↯
Treasury Secretary Bessent announces Operation Economic Outcast ('Economic D-Day'), a whole-of-government campaign targeting Iran's financial channels across five sectors including digital assets. OFAC issues a digital-asset sectoral determination enabling designation of any operator in Iran's crypto sector.(2026-08-24:bitbank-iranian-crypto-exchange)event
cccaafaa
↯
OFAC designates Hormuz Safe Marine Services Authority for operating an IRGC-backed Bitcoin-payment extortion scheme on Strait of Hormuz shipping lanes.(2026-07-29:bitbank-iranian-crypto-exchange)event
a87023e2
↯
OFAC designates Dot One Value Creation Group and nine associated entities, including Zedpay, Zedx DMCC, BZ Diamond, and multiple DotOne subsidiaries, as part of Operation Economic Outcast.(2026-07-24:bitbank-iranian-crypto-exchange)event
604bae8d
↯
According to OFAC, Hormuz Safe Marine Services Authority begins using BitBank to transfer maritime toll payments to the Iranian regime. Zanjani also allegedly begins using BitBank to move Bitcoin to the IRGC.(2026-06-01:bitbank-iranian-crypto-exchange)event
47070f55
↯
OFAC designates Babak Zanjani and UK-registered exchanges Zedcex and Zedxion, accusing him of money laundering for the IRGC.(2026-01-30:bitbank-iranian-crypto-exchange)event
2c01562b
↯
DotOne Rail Company, a Zanjani-controlled entity, reportedly secured an $800 million rail contract with Iran Railways, signaling Zanjani's public re-emergence as a regime-linked economic actor.(2025-04-01:bitbank-iranian-crypto-exchange)event
0849d53e
↯
Zanjani's death sentence commuted to 20 years in prison, reportedly following repatriation of approximately $2.1 billion in assets.(2024-04-30:bitbank-iranian-crypto-exchange)event
9c993961
↯
Babak Zanjani sentenced to death by Iranian courts for embezzling from the National Iranian Oil Company (NIOC).(2016-03-01:bitbank-iranian-crypto-exchange)event
f8e7807b
↯
Solana Summit Canada Day 2 (Summit Day) — St. Lawrence Market North, Toronto(2026-09-24:solana-summit-toronto)event
cd115a89
↯
Solana Summit Canada Day 1 (Builder Day) — St. Lawrence Market North, Toronto(2026-09-23:solana-summit-toronto)event
a015aeed
↯
Investigation conducted; no fraud indicators found. Event is upcoming (September 23–24, 2026).(2026-09-18:solana-summit-toronto)event
7bc36cc3
↯
IOG posted a public advisory on X urging all users to avoid interacting with the YouTube channel until further notice, warning against sending funds or clicking links. Charles Hoskinson separately confirmed the breach on X and stated IOG was working with YouTube to remove content and restore channel credentials.(2026-09-18:input-output-group-iog-youtube-channel-hijack-deepfake-hoskinson-giveaway-scam)event
0e16eac0
↯
Cardano Foundation's official X account was compromised. Attackers posted a fabricated Solana-based token ($ADASOL) and a false claim that the SEC had filed a lawsuit against the Foundation. The fake token generated over $500,000 in trading volume before the scam was identified.(2024-12-08:input-output-group-iog-youtube-channel-hijack-deepfake-hoskinson-giveaway-scam)event
ed92676b
↯
Progressive Robot publishes analysis comparing the scheme's tactics to pig-butchering playbooks, noting the hybrid AI/gig-worker model and daily throughput figures.(2026-09-17:ai-dating-scam-network-dora-doni-romi-cluster)event
e744b4c7
↯
Kira (com.meraki.kira) reportedly still accessible on Google Play Store, sharing the same codebase as previously removed apps in the network.(2026-09-16:ai-dating-scam-network-dora-doni-romi-cluster)event
db10e8f5
↯
Techlicious publishes coverage of the Anthropic findings, detailing app names, fraud mechanics, and the 25,000-victim scale.(2026-09-14:ai-dating-scam-network-dora-doni-romi-cluster)event
d0de3e5f
↯
Anthropic publishes its September 2026 threat intelligence report publicly disclosing the GTG-15001 dating app network, banning associated accounts, and notifying Apple, Google, and other AI providers.(2026-09-10:ai-dating-scam-network-dora-doni-romi-cluster)event
94fdb4c7
↯
Nalo reportedly removed from Google Play Store.(2026-09-07:ai-dating-scam-network-dora-doni-romi-cluster)event
fdfbe9c9
↯
Dora, Jovia, Romi, Luma, and Eterna reportedly removed from Google Play Store.(2026-09-03:ai-dating-scam-network-dora-doni-romi-cluster)event
d3d77afc
↯
Approximate end of the two-week monitored activity window cited in Anthropic's report.(2026-04-14:ai-dating-scam-network-dora-doni-romi-cluster)event
67a94e0f
↯
Approximate start of monitored two-week window during which 4,700+ Claude-powered AI personas engaged at least 25,000 users across the app network, sending roughly 2.36 million messages.(2026-04-01:ai-dating-scam-network-dora-doni-romi-cluster)event
38db4fb4
↯
Multiple crypto news outlets including PANews, KuCoin News, and Phemex News reported ZachXBT's allegations. No response from 7zarc and no law enforcement action reported as of this date.(2026-09-18:7zarc)event
c71f71de
↯
7zarc-linked wallet cluster reactivated after approximately four years of dormancy. Funds began moving to centralized exchange deposit addresses.(2026-09-01:7zarc)event
11797611
↯
7zarc-associated wallet cluster reportedly went dormant following the alleged Raidparty exit scam. Exact date of last pre-dormancy activity not confirmed in reviewed sources.(2022-01-01:7zarc)event
314d7f5c
↯
A snapshot for Raid Party 2.0 was announced for November 15, 2022; the project's activity subsequently collapsed and 7zarc-linked wallets reportedly went dormant around this period.(2022-11-15:7zarc)event
0f1ccadc
↯
RaidParty Heroes NFT collection launched on Ethereum at a mint price of 0.8 ETH, with 5,292 items.(2022-02-04:7zarc)event
f49a896c
↯
Multiple crypto news outlets (PANews, KuCoin News, Phemex News) publish reports on ZachXBT's allegations. 7zarc does not provide a public response as of this date.(2026-09-18:raidparty)event
54b7506e
↯
Last recorded transaction on the RaidParty game contract (a reward claim), suggesting effective cessation of on-chain activity.(2024-05-01:raidparty)event
384b2c1a
↯
Pseudonym 7zarc allegedly disappeared from public view, according to ZachXBT's September 2026 investigation. Project activity began declining around this period.(2022-12-31:raidparty)event
87f4e930
↯
Snapshot taken for RaidParty 2.0 migration covering Genesis Heroes, Heroes, Fighters, and CFTI holders.(2022-11-15:raidparty)event
c3b35daf
Data refreshes within about 10 minutes · All metrics derived from Supabase