← AVOID.NET
Entity Graph
Browse extracted entities, relationships, and potential duplicates.
Total entities
29,356
Relationships
32,463
Potential duplicates
0
Filter by kind
Entities
↯ac69834f
Japan Times and other outlets report on the NPA's confirmation that North Korean hackers were behind crypto thefts spanning more than 100 countries, including Japan.(2026-09-19:waterplum-contagious-interview)event
↯7410ee3f
Japan's NPA separately discloses that authorities identified and dismantled a North Korean IT-worker laptop farm on Japanese soil for the first time.(2026-09-18:waterplum-contagious-interview)event
↯ac929be4
End of the primary WaterPlum campaign window cited in the joint advisory. In the same month, blockchain firm Consensys discloses it had unknowingly engaged a consultant later linked to North Korea and revoked the individual's access.(2026-07:waterplum-contagious-interview)event
↯7d85ca05
US nationals Matthew Isaac Knoot and Erick Ntekereze Prince are sentenced to 18 months in prison each for operating a laptop farm facilitating North Korean remote IT workers; separately, Kejia Wang and Zhenxing Wang are sentenced for a related identity-theft-based scheme that generated over $5 million for North Korea.(2026-05:waterplum-contagious-interview)event
↯a0bce34d
Independent research reports North Korea-linked actors distributing roughly 1,700 malicious packages across npm, PyPI, Go, and Rust ecosystems; a related campaign around this period is separately reported to have generated approximately $12 million.(2026-04:waterplum-contagious-interview)event
↯091be14b
Start of the primary WaterPlum campaign window cited in the joint advisory, during which the group allegedly infects devices and compromises crypto wallets globally.(2025-12:waterplum-contagious-interview)event
↯d7c1c3c0
An applicant using a stolen identity and fabricated resume, later assessed by Japanese police to share infrastructure with WaterPlum, applies for an engineering role at crypto exchange bitFlyer using VPN/proxy services; bitFlyer does not hire the applicant.(2025-05:waterplum-contagious-interview)event
↯522c697f
Security researchers first publicly document the "Contagious Interview" campaign, in which North Korea-linked actors use fake job interviews and malicious npm packages (including BeaverTail and InvisibleFerret) to target software developers.(2023-11:waterplum-contagious-interview)event
↯1bd883f8
Another instance of alleged near-simultaneous identical posts across @TrendingBitcoin, @Vivek4real_, and @Bitcoin_Teddy cited in the complaint.(2026-08-03:vivek-kumar-sen-and-zamyang-sherpa)event
↯b58cdcca
The last of the six accounts allegedly enrolled in the Creator Revenue Sharing Program, per X's complaint.(2026-02-28:vivek-kumar-sen-and-zamyang-sherpa)event
↯33c68a31
The earliest of the six Creator Revenue Sharing Program enrollments allegedly began, per X's complaint schedule.(2023-08-01:vivek-kumar-sen-and-zamyang-sherpa)event
↯632ca45d
Vivek Kumar Sen discovered Bitcoin, per his own public statements on his Bitcoin Magazine author profile.(2016-01-01:vivek-kumar-sen-and-zamyang-sherpa)event
↯748217a0
The Daily Hodl published a detailed secondary report on the coordinated network, expanding coverage of the operation's mechanics and ZachXBT's nation-state warning.(2026-03-26:ai-war-fear-scam-network-oramama-token)event
↯0b224e06
U.S. Attorney's Office for the District of Columbia files five civil forfeiture complaints targeting over $25 million in USDT across five distinct fraud schemes (26-cv-2539 through 26-cv-2543), naming fraudulent platforms MicMarkets, Zoomex spoof domains, BitaGold, SteemFly, Smart Labs, Bdswg.com, and CatLabs (recovery fraud).(2026-07-21:doj-225m-pig-butchering-seizure-campaign-2026)event
↯3fe8556b
Tether freezes USDT address associated with the fraudulent investment platform that is the subject of July 2026 civil complaint 26-cv-2543.(2026-05-27:doj-225m-pig-butchering-seizure-campaign-2026)event
↯86629a9a
DOJ announces coordinated international operation: at least 276 arrests (275 by Dubai Police, 1 by Royal Thai Police), dismantlement of at least nine scam centers, $701 million in cryptocurrency restrained, and 503 .com domains seized. Named defendants Awang and Chandra among those arrested in Dubai.(2026-05-08:doj-225m-pig-butchering-seizure-campaign-2026)event
↯631b98c3
Southern District of California criminal complaints charge Wiliang Awang, Andreas Chandra, Lisa Mariam, and a fugitive co-defendant with wire fraud conspiracy for Sanduo Group and Giant Company pig butchering operations (26MJ2335-AHG; 26MJ2437-AHG).(2026-04-01:doj-225m-pig-butchering-seizure-campaign-2026)event
↯b296b058
Southern District of California grand jury returns indictment against Thet Min Nyi (also known as Ko Thet, Pixy), alleged manager and recruiter for Ko Thet Company pig butchering operations (26CR762-RSH).(2026-03-01:doj-225m-pig-butchering-seizure-campaign-2026)event
↯b54fc883
D.C. Scam Center Strike Force announces total frozen and seized cryptocurrency from Chinese transnational criminal networks has surpassed $580 million in approximately three months of operation.(2026-02-26:doj-225m-pig-butchering-seizure-campaign-2026)event
↯bbca8382
UK National Crime Agency refers a British victim case to U.S. authorities, leading to the July 2026 recovery-fraud civil complaint 26-cv-2541 involving impersonation of the NCA, CatLabs, and HMRC.(2026-01-26:doj-225m-pig-butchering-seizure-campaign-2026)event
↯2a9f3e90
Tether freezes funds associated with the $78 million BitaGold/SteemFly/Smart Labs/Bdswg.com network — the subject of the July 2026 civil complaint 26-cv-2542.(2026-01-01:doj-225m-pig-butchering-seizure-campaign-2026)event
↯71bc8e45
Shunda scam compound in Min Let Pan, Myanmar seized by the Karen National Liberation Army; defendants Huang Xingshan and Jiang Wen Jie flee but are arrested by Thai authorities in early 2026.(2025-11-01:doj-225m-pig-butchering-seizure-campaign-2026)event
↯45a4f299
FinCEN issues Section 311 final rule severing Cambodia's Huione Group — alleged to have laundered over $4 billion — from the U.S. financial system.(2025-10-15:doj-225m-pig-butchering-seizure-campaign-2026)event
↯157d5743
DOJ files civil forfeiture complaint for approximately 127,271 Bitcoin (~$15 billion), the largest forfeiture action in DOJ history, in the Eastern District of New York (No. 1:25-cv-05745). OFAC simultaneously designates 146 individuals and entities tied to Prince Holding Group.(2025-10-14:doj-225m-pig-butchering-seizure-campaign-2026)event
↯11964396
Federal grand jury in the Eastern District of New York returns indictment against Chen Zhi, chairman of Prince Holding Group (Cambodia), charging wire fraud conspiracy and money laundering conspiracy for alleged operation of forced-labor pig butchering compounds.(2025-10-08:doj-225m-pig-butchering-seizure-campaign-2026)event
↯73ed3e13
Zoomex spoof domains (zoomex-net.com, zoomex-pay.com) subject USDT frozen by Tether at law enforcement request — approximately 20 months before the July 2026 civil complaint.(2025-07-25:doj-225m-pig-butchering-seizure-campaign-2026)event
↯323d97c1
Shunda scam compound begins operations in Min Let Pan, Myanmar.(2025-01-01:doj-225m-pig-butchering-seizure-campaign-2026)event
↯6b2617cb
Shan Hanes sentenced to 293 months (approximately 24 years) in federal prison — the longest white-collar sentence in Kansas federal court history.(2024-08-21:doj-225m-pig-butchering-seizure-campaign-2026)event
↯be93fd61
Shan Hanes pleads guilty to one count of embezzlement as a bank officer.(2024-05-01:doj-225m-pig-butchering-seizure-campaign-2026)event
↯f8669e15
Heartland Tri-State Bank collapses and is taken over by the FDIC following the $47.1 million embezzlement by CEO Shan Hanes.(2023-07-01:doj-225m-pig-butchering-seizure-campaign-2026)event
↯7709fcc8
Shan Hanes sends 3,116,350 USDT from Heartland Tri-State Bank to a fraud deposit address later identified in the DOJ's $225 million forfeiture complaint.(2023-06-28:doj-225m-pig-butchering-seizure-campaign-2026)event
↯ea3119d0
Shan Hanes, CEO of Heartland Tri-State Bank (Elkhart, Kansas), begins transferring bank funds to a pig butchering scam address, ultimately sending $47.1 million across 10 wire transfers through July 2023.(2023-05-01:doj-225m-pig-butchering-seizure-campaign-2026)event
↯a6edf795
Multiple crypto news outlets published reporting on the lawsuit. No defense filing, court ruling, or public statement from the defendants had been located.(2026-09-21:vivek-kumar-sen-and-zamyang-sherpa)event
↯b0b58fd6
X General Counsel James Burnham publicly addressed the lawsuit, stating X had 'sued several people who abused Creator Revenue Sharing by operating a coordinated network' and that X does 'not tolerate fraudulent behavior.'(2026-09-20:vivek-kumar-sen-and-zamyang-sherpa)event
↯3bd1b467
X Internet Unlimited Company and X Corp. filed civil claim BL-2026-001161 against Vivek Kumar Sen, Zamyang Sherpa, and persons unknown in the Business and Property Courts of England and Wales.(2026-09-17:vivek-kumar-sen-and-zamyang-sherpa)event
↯2c0b1429
X launched Original Content Rewards to replace the Creator Revenue Sharing Program, with stated filters against artificial impressions.(2026-09-08:vivek-kumar-sen-and-zamyang-sherpa)event
↯555193ca
X's Creator Revenue Sharing Program ended for all participants.(2026-09-07:vivek-kumar-sen-and-zamyang-sherpa)event
↯547f2bcc
X suspended all six accounts (@Vivek4real_, @Bitcoin_Teddy, @saylordocs, @TrendingBitcoin, @Kalshibacktest, @PolyBackTest) citing coordinated revenue-sharing fraud.(2026-08-18:vivek-kumar-sen-and-zamyang-sherpa)event
↯bcef2403
@Vivek4real_, @saylordocs, and @Bitcoin_Teddy allegedly replied to the same third-party post within 31 seconds, per X's filing.(2026-08-13:vivek-kumar-sen-and-zamyang-sherpa)event
↯05e96915
X stopped accepting new Creator Revenue Sharing Program enrollments; existing participants permitted to earn through September 7, 2026.(2026-08-07:vivek-kumar-sen-and-zamyang-sherpa)event
↯c510eedd
@Vivek4real_ and @TrendingBitcoin allegedly published substantially similar posts 11 seconds apart, per X's filing.(2026-08-05:vivek-kumar-sen-and-zamyang-sherpa)event
↯f5ec14f5
@TrendingBitcoin, @Vivek4real_, and @Bitcoin_Teddy allegedly published matching content within minutes of one another — one of several specific coordination incidents cited in X's filing.(2026-07-23:vivek-kumar-sen-and-zamyang-sherpa)event
↯199222ff
The earliest of the six primary Bitcoin-themed accounts named in X's complaint reportedly began enrolling in X's Creator Revenue Sharing Program (enrollment window cited in the complaint runs from August 2023 to February 2026).(2023-08:vivek-kumar-sen-and-zamyang-sherpa)event
↯aeb967db
Following ZachXBT's disclosure, X reportedly suspended all 16 accounts identified as part of the scam network; no specific suspension date was reported.(2026-03:ai-war-fear-scam-network-oramama-token)event
↯b9b3220e
X (Twitter) suspended all 16 scam accounts identified by ZachXBT, according to ZachXBT's own reporting as cited in secondary sources.(2026-03-23:ai-war-fear-scam-network-oramama-token)event
↯d2e6f474
At least 10 accounts in the network simultaneously promoted $ORAMAMA, a Solana meme coin on PumpSwap, in a coordinated single-day push. None of the accounts mentioned the token again. On-chain evidence later cited by ZachXBT indicated six-figure profits from the operation.(2026-02-22:ai-war-fear-scam-network-oramama-token)event
Data refreshes within about 10 minutes · All metrics derived from Supabase