← AVOID.NET
Entity Graph
Browse extracted entities, relationships, and potential duplicates.
Total entities
29,477
Relationships
32,559
Potential duplicates
0
Filter by kind
Entities
↯a590fe71
Point Wild's Lat61 Threat Intelligence Team (researchers Prathamesh Shingare and Kedar Shashikant Pandit) published the primary technical dissection of Vanta Stealer, documenting its PyInstaller/PyArmor architecture, dynamic module retrieval, targeted data categories, exfiltration mechanism, and 20 SHA256 IOCs.(2026-07-28:vanta-stealer-python-infostealer-targeting-crypto-wallets)event
□02388bc6
Vanta Stealer — Python Infostealer Targeting Crypto Walletsorganization
◇064cc173
CPcTERriWFUy7vTqdNrdCmhEpG6z6qEqcTp3UrjbxBEawallet52% conf
↯0d1313d0
TrapDoor supply chain campaign detected targeting 34 packages across npm, PyPI, and Crates.io, stealing crypto wallet keystores, SSH keys, and cloud credentials from developers.(2026-05-19:requests-secure-v2)event
↯0191aaa7
RubyGems and PyPI reported hit by further waves of malicious packages stealing credentials and cryptocurrency, prompting security changes to both registries. Specific date approximate based on reporting.(2025-08-01:requests-secure-v2)event
↯99e838ab
Checkmarx reported packages including AtomicDecoderss, TrustDecoderss, WalletDecoderss, and ExodusDecodes on PyPI, masquerading as wallet recovery tools to steal private keys and mnemonic phrases from Atomic, Trust Wallet, MetaMask, Exodus, and other wallets. Specific date approximate based on reporting.(2024-10-01:requests-secure-v2)event
↯13639402
requests-darwin-lite, a fake requests variant concealing a Golang Sliver C2 framework inside a manipulated PNG logo file, was identified on PyPI after 417 downloads and taken down. Specific date approximate based on reporting.(2024-05-01:requests-secure-v2)event
↯56c682d7
PyPI suspended new project creation and user registration at 02:16 UTC in response to the mass typosquatting campaign. All identified malicious packages were removed the same day.(2024-03-28:requests-secure-v2)event
↯91d8e82f
Over 500 typosquatting variants of popular Python packages including more than 50 targeting the requests library (e.g., reqzests, requzsts) were uploaded to PyPI by an automated campaign carrying zgRAT-linked crypto-stealing payloads.(2024-03-26:requests-secure-v2)event
□aa2fcca1
requests-secure-v2organization
◎707b9ad7
zscaler.comdomain
↯e05c25f4
Zscaler ThreatLabz updates its original blog post on the indirect prompt injection campaigns. No confirmed takedown of debank[.]auction is noted in available sources as of this date.(2026-08-05:debank-auction)event
↯0ec21b22
Broader security press coverage of the campaign continues, with Infosecurity Magazine and other outlets amplifying the Zscaler findings.(2026-07-09:debank-auction)event
↯49550bca
SecurityWeek reports on the Zscaler findings, noting that four of 26 LLMs executed fraudulent crypto payments in testing and that GPT-5.4 and Claude Sonnet 4.5 misclassified the DeBank typosquatting domain as legitimate when lacking a reference source.(2026-07-06:debank-auction)event
↯86af4f98
Zscaler ThreatLabz publishes research documenting debank[.]auction as an active indirect prompt injection campaign targeting AI agents, alongside a companion Python-library impersonation campaign.(2026-07-02:debank-auction)event
↯9fea7a43
The Hacker News publishes analysis arguing that typosquatting has evolved from a user-facing risk to an AI supply chain threat, establishing the broader context for campaigns like debank.auction.(2026-05-01:debank-auction)event
↯13579ff7
DeBank (debank.com), the legitimate DeFi portfolio tracker being impersonated, launches. Exact founding date is approximate; commonly cited as 2018.(2018-01-01:debank-auction)event
↯d58f39fe
Aleksei Andriunin sentenced to eight months in prison and one year supervised release. Gotbit Consulting LLC sentenced to five years probation and ordered to forfeit approximately $23 million and cease operations.(2025-06-01:vy-pham)event
↯f1e19c08
Gotbit founder Aleksei Andriunin pleads guilty to wire fraud and conspiracy to commit market manipulation.(2025-03-20:vy-pham)event
↯400bac76
Gotbit founder Aleksei Andriunin extradited to the United States.(2025-02-25:vy-pham)event
↯a8f0a0c5
DOJ unseals criminal information charging Vy Pham with conspiracy to commit market manipulation, conspiracy to commit wire fraud, and conspiracy to operate an unlicensed money transmitting business. Pham agrees to plead guilty. SEC simultaneously files civil complaint against Pham (Litigation Release No. 26153). SEC also files separate civil complaint against four other Saitama LLC promoters.(2024-10-09:vy-pham)event
↯70d2a4be
Gotbit founder Aleksei Andriunin arrested in Portugal as part of Operation Token Mirrors.(2024-10-08:vy-pham)event
↯e2743203
Alleged Robo Inu wash trading campaign with Gotbit ends, according to DOJ timeline.(2023-06-01:vy-pham)event
↯a155a594
Prosecutors allege Pham instructs Gotbit to boost Robo Inu volume 'above 1.1mil daily' on BitMart.(2023-01-01:vy-pham)event
↯fe5baf0c
Saitama LLC dissolved. Saitama co-founders Armand, Kohli, and Tran form a new company in Dubai and relocate operations.(2022-06-01:vy-pham)event
↯623f6254
Robo Inu Finance begins alleged paid wash trading campaign with Gotbit Consulting LLC. Prosecutors allege a private Telegram chatroom is created among Pham, Gotbit executives Fedor Kedrov and Qawi Jalili, and others to coordinate fabricated volume.(2022-02-01:vy-pham)event
↯46a2ed1f
Robo Inu Finance (RBIF) token launches on Ethereum, founded by Vy Pham after departing Saitama.(2021-11-01:vy-pham)event
↯fb6702b5
Saitama LLC incorporated in Massachusetts. Vy Pham is among the promoters of Saitama Inu.(2021-08-01:vy-pham)event
□3112d97b
Vy Phamorganization
↯fbe3397d
SEC files proposed final judgment (LR-26496): Rainberry agrees to pay $10 million civil penalty and accept permanent injunction against Section 17(a)(3) violations. All remaining claims against Justin Sun, Tron Foundation, BitTorrent Foundation, and Rainberry dismissed with prejudice. No admissions of wrongdoing. Subject to federal court approval.(2026-03-05:rainberry-inc)event
↯139475af
Six celebrity defendants (Lindsay Lohan, Jake Paul, Ne-Yo, Lil Yachty, Kendra Lust, Akon) settle SEC charges, paying approximately $400,000 each without admitting or denying findings.(2023-01-01:rainberry-inc)event
↯d23788da
SEC files complaint (LR-25676) against Justin Sun, Tron Foundation, BitTorrent Foundation, and Rainberry Inc., alleging unregistered securities sales, wash trading, and undisclosed celebrity promotions of TRX and BTT. Eight celebrities including Lindsay Lohan and Jake Paul charged separately.(2023-03-22:rainberry-inc)event
↯b9ae5653
Former Rainberry employees Hall and Juraszek file California federal lawsuit alleging Sun directed illegal downloading of copyrighted films.(2020-01-01:rainberry-inc)event
↯eb42e253
BitTorrent Token (BTT) launched via Binance Launchpad initial exchange offering.(2019-01-28:rainberry-inc)event
↯6da6c0e6
SEC alleged wash trading of TRX begins, with Sun directing more than 600,000 wash trades through at least February 2019.(2018-04-01:rainberry-inc)event
↯4bd52fc0
Justin Sun acquires Rainberry Inc (BitTorrent) for a reported $140 million following a competitive bidding process.(2018-06-01:rainberry-inc)event
↯8bffe5f2
BitTorrent, Inc. quietly renames itself Rainberry Inc.(2017-01-01:rainberry-inc)event
↯7837de10
BitTorrent, Inc. founded by Bram Cohen and Ashwin Navin.(2004-01-01:rainberry-inc)event
□fd3a532d
Rainberry Incorganization
◎37ddd8cc
netcraft.comdomain
↯8cf9577d
OpenAI publishes major report confirming shutdown of a larger Cambodia-based criminal network using ChatGPT for romance fraud, fake crypto investment platforms, illegal gambling, and law enforcement impersonation.(2026-07-31:ai-powered-crypto-phishing-infrastructure-2026)event
Data refreshes within about 10 minutes · All metrics derived from Supabase