← AVOID.NET
Entity Graph
Browse extracted entities, relationships, and potential duplicates.
Total entities
22,635
Relationships
18,025
Potential duplicates
0
Filter by kind
Entities
↯db53d78d
A single victim loses 783 BTC (~$91 million) after attackers impersonate customer support representatives for a hardware wallet manufacturer and a cryptocurrency exchange. The theft occurs exactly one year after the $243M Genesis creditor attack. Funds are moved immediately to a Bitcoin address beginning bc1qyxyk4qgyrkx4rjwsuevug04wahdk6uf95mqlej.(2025-08-19:91m-bitcoin-social-engineering-theft-hardware-wallet-impersonation-august-2026)event
↯1ac40545
Malone Lam and Jeandiel Serrano are arrested in Miami and Los Angeles respectively in connection with the $243M Genesis creditor theft, charged with conspiring to steal and launder cryptocurrency.(2024-09-18:91m-bitcoin-social-engineering-theft-hardware-wallet-impersonation-august-2026)event
↯69c86bdd
A single Genesis bankruptcy creditor loses approximately 4,064 BTC (~$243 million) in a social engineering attack. Perpetrators impersonate Google support and Gemini exchange support, then use AnyDesk screen-share to steal private keys.(2024-08-19:91m-bitcoin-social-engineering-theft-hardware-wallet-impersonation-august-2026)event
♦b469984d
$91M Bitcoin Social Engineering Theft — Hardware Wallet Impersonation (August 2026)token
↯1e57a70a
Travis Ford's voluntary surrender date to the Bureau of Prisons.(2026-01-07:travis-ford-wolf-capital-crypto-ponzi)event
↯1670d98f
CFTC files civil enforcement complaint against Travis Ford and Wolf Capital Crypto Trading LLC in the Northern District of Oklahoma, seeking disgorgement, restitution, civil penalties, and permanent trading and registration bans.(2025-12-19:travis-ford-wolf-capital-crypto-ponzi)event
↯fc87d5d3
Travis Ford sentenced to 60 months in federal prison, three years supervised release, $1,039,124.45 forfeiture, and $174,477.29 restitution.(2025-11-14:travis-ford-wolf-capital-crypto-ponzi)event
↯4e6259bb
Travis Ford pleads guilty to one count of conspiracy to commit wire fraud before Judge John D. Russell in the Northern District of Oklahoma.(2025-01-09:travis-ford-wolf-capital-crypto-ponzi)event
↯17b80eaf
CFTC civil complaint alleged fraud period ends; CFTC identifies December 2024 as the end date of Wolf Capital's solicitation activity.(2024-12-24:travis-ford-wolf-capital-crypto-ponzi)event
↯665e4c91
Federal indictment filed against Travis Ford in the U.S. District Court for the Northern District of Oklahoma, case number 4:24-CR-387-JDR.(2024-12-10:travis-ford-wolf-capital-crypto-ponzi)event
↯5e7e422e
DOJ-identified fraud period ends; Wolf Capital ceases operations after raising approximately $9.4 million from approximately 2,800 investors.(2023-08-01:travis-ford-wolf-capital-crypto-ponzi)event
↯b2f1429e
DOJ-identified fraud period begins: Wolf Capital accelerates investor solicitation via website, Telegram, and Discord, promising 1–2% daily returns.(2023-01-01:travis-ford-wolf-capital-crypto-ponzi)event
↯bf0c5dfe
Wolf Capital Crypto Trading LLC allegedly begins soliciting investor funds, per the CFTC civil complaint's stated start date.(2022-10-06:travis-ford-wolf-capital-crypto-ponzi)event
□9ed32dc2
Travis Ford — Wolf Capital Crypto Ponziorganization
◎0caac692
cycode.comdomain
◎910bf7ca
teampcp.pluto.securitydomain
↯5fee7bd8
Security researchers report total impact of 444+ distinct packages and 1,381–2,234 poisoned versions; combined downstream exposure confirmed at over 2 billion monthly installs.(2026-08-05:keyv-cacheable-npm-supply-chain-attack-teampcp-mini-shai-hulud-august-2026)event
↯828af441
By 17:40 IST: Previous clean versions restored as 'latest' for at least nine primary affected packages.(2026-08-04:keyv-cacheable-npm-supply-chain-attack-teampcp-mini-shai-hulud-august-2026)event
↯6168b266
TeamPCP open-sourced the Shai-Hulud worm toolkit under the description 'A Gift From TeamPCP', enabling potential derived operators.(2026-05-12:keyv-cacheable-npm-supply-chain-attack-teampcp-mini-shai-hulud-august-2026)event
↯eac07e43
TeamPCP Phase 5: TanStack attack — 84 malicious versions published across 42 @tanstack/* npm packages via OIDC token theft.(2026-05-11:keyv-cacheable-npm-supply-chain-attack-teampcp-mini-shai-hulud-august-2026)event
↯193a0215
CERT-EU officially attributed the breach of the European Commission's AWS environment to TeamPCP.(2026-04-02:keyv-cacheable-npm-supply-chain-attack-teampcp-mini-shai-hulud-august-2026)event
↯b4246f8c
TeamPCP Phase 2/3: 76 of 77 Trivy GitHub Action tags force-pushed with SANDCLOCK credential stealer; CanisterWorm infected 66+ npm packages using ICP blockchain for C2.(2026-03-19:keyv-cacheable-npm-supply-chain-attack-teampcp-mini-shai-hulud-august-2026)event
↯0ed147d5
TeamPCP threat group first observed conducting cloud-native cryptomining and credential theft campaigns.(2025-11-01:keyv-cacheable-npm-supply-chain-attack-teampcp-mini-shai-hulud-august-2026)event
□8db78b9f
keyv / cacheable npm Supply Chain Attack — TeamPCP Mini Shai-Hulud (August 2026)organization
↯47b5215a
Address investigated by AVOID.NET. No on-chain transactions, no OFAC designation, no abuse reports, and no regulatory actions found. Address appears dormant or unused.(2026-08-07:0xdf8c3a7ffbdc144f462687120e4ae4c4e5e55abe)event
□1957f5f5
0xdF8C3A7FFbdC144f462687120E4AE4C4e5E55abEorganization
↯c916863e
Coordinated DOJ, Treasury (OFAC), and State Department actions announced publicly: 503 fraudulent websites seized, $701 million in cryptocurrency identified, Cambodian senator sanctioned, $10 million reward offered for Tai Chang network information.(2026-04-24:jiang-wen-jie)event
↯91497f0f
DOJ Scam Center Strike Force unseals criminal complaints charging Jiang Wen Jie (also known as Jiang Nan) and Huang Xingshan with wire fraud conspiracy. Jiang is alleged to have served as team leader supervising workers who targeted American victims at Shunda Park.(2026-04-23:jiang-wen-jie)event
↯4840275f
Jiang Wen Jie and Huang Xingshan are arrested by Thai authorities on immigration charges while allegedly traveling through Thailand en route back to Myanmar. Both are held in Thai custody.(2026-01-01:jiang-wen-jie)event
↯96466d12
Jiang Wen Jie and co-defendant Huang Xingshan allegedly relocate to Cambodia following the KNLA seizure of Shunda Park, where they allegedly attempt to continue cryptocurrency fraud operations.(2025-12-01:jiang-wen-jie)event
↯d4998ff9
Karen National Liberation Army (KNLA) seizes Shunda Park compound. Approximately 1,307 foreign workers are subsequently evacuated across the Thai border. FBI agents access the compound and review more than 1,300 desktop computers and approximately 8,000 mobile devices.(2025-11-21:jiang-wen-jie)event
↯73371045
DOJ Scam Center Strike Force officially launched to target cryptocurrency investment fraud, cyber-enabled fraud, human trafficking, and money laundering operations in Southeast Asia.(2025-11-01:jiang-wen-jie)event
↯e46a5d46
Shunda Park compound in Min Let Pan, Myanmar begins operations (approximate start date per DOJ complaint). Trafficked workers from approximately 30 nations are forced to conduct pig-butchering crypto investment fraud targeting American victims.(2025-01-01:jiang-wen-jie)event
↯70c025da
Bloomberg, Boston Globe, and other major outlets report on the DOJ charges against Huang Xingshan and Jiang Wen Jie.(2026-04-24:huang-xingshan)event
↯813af792
DOJ Scam Center Strike Force unseals wire fraud conspiracy criminal complaints against Huang Xingshan and Jiang Wen Jie. Simultaneously: 503 fake crypto investment websites taken down, over $700 million in cryptocurrency restrained, and a Telegram recruitment channel with 6,000+ followers seized.(2026-04-23:huang-xingshan)event
↯339eabff
Huang Xingshan and Jiang Wen Jie are arrested by Thai law enforcement on immigration charges while attempting to transit through Thailand back into Myanmar.(2026-02-01:huang-xingshan)event
↯6ac98db8
After Shunda Park's seizure, Huang Xingshan and Jiang Wen Jie allegedly relocate to a scam compound in Cambodia to continue cryptocurrency investment fraud operations.(2026-01-01:huang-xingshan)event
↯f80a7783
KNU reports evacuating 1,307 foreign workers from Shunda Park across the Thai border with Thai cooperation. 604 devices and documents surrendered to Thai authorities for investigation. A fire erupts at the compound.(2025-12-01:huang-xingshan)event
↯82549ff1
DOJ Scam Center Strike Force is officially launched by U.S. Attorney Jeanine Pirro in November 2025, combining U.S. Attorney's Office for D.C., DOJ Criminal Division, FBI, Secret Service, IRS-CI, USPIS, and DEA.(2025-11-25:huang-xingshan)event
↯898420eb
Karen National Liberation Army (KNLA) seizes Shunda Park compound following clashes with regime-affiliated DKBA forces. Over 3,000 workers from approximately 23 countries are found inside.(2025-11-21:huang-xingshan)event
↯1209ed04
Shunda Park compound allegedly begins operations in Min Let Pan, Karen State, Myanmar, under the management of Huang Xingshan and co-defendant Jiang Wen Jie.(2025-01-01:huang-xingshan)event
↯8fd81625
Full technical disclosure published by Coinspect, naming all five affected wallet applications and linking the root cause explicitly to crypto-js. GitHub Advisory GHSA-rg76-677x-56q9 and CVE-2026-71851 formally published.(2026-08-05:cryptojs-ill-bloom-weak-rng-multi-wallet-drain-cve-2026-71851)event
Data refreshes every 5 minutes · All metrics derived from Supabase