November 2022 betting-website credential-stuffing campaign
Campaign
Summary
Hide ▲
Show ▼
The November 2022 credential-stuffing campaign against a betting platform compromised more than 60,000 accounts and drove about $600,000 in theft from affected customers. Attackers used stolen login credentials to access user accounts, add payment methods, and empty balances. The operation also fed a market for compromised-account resale, indicating an organized fraud pipeline rather than a one-off intrusion.
Related Happenings
DraftKings hit by account takeover attack
Incident
H score34
First: 25.06.2026 00:55
Last: 25.06.2026 00:55
Sources 1
How related:
In November 2022, DraftKings disclosed that hackers accessed customer accounts through credential stuffing attacks that exploited weak passwords or reused login credentials.
About this happening:
The DraftKings customer-account compromise exposed 60,000 accounts through credential stuffing and enabled theft from affected users. Attackers added payment methods u...
DraftKings hit by account takeover attack
IncidentHow related: In November 2022, DraftKings disclosed that hackers accessed customer accounts through credential stuffing attacks that exploited weak passwords or reused login credentials.
About this happening: The DraftKings customer-account compromise exposed 60,000 accounts through credential stuffing and enabled theft from affected users. Attackers added payment methods u...
Scattered Spider SMS phishing and SIM-swap crypto theft campaign
Campaign
H score53
First: 20.04.2026 16:33
Last: 20.04.2026 16:33
Sources 1
About this happening:
The Scattered Spider campaign used SMS phishing and SIM swap attacks to steal employee credentials, hijack phone numbers, and take over email and virtual currency wa...
Scattered Spider SMS phishing and SIM-swap crypto theft campaign
CampaignAbout this happening: The Scattered Spider campaign used SMS phishing and SIM swap attacks to steal employee credentials, hijack phone numbers, and take over email and virtual currency wa...
Kamerin Stokes sentenced for DraftKings account-selling scheme
Law Enforcement
H score39
First: 17.04.2026 10:10
Last: 17.04.2026 10:10
Sources 1
How related:
Joseph Garrison received an 18-month imprisonment sentence in January 2024, while Kamerin Stokes received a 30-month sentence in April 2026.
About this happening:
Kamerin Stokes was sentenced to 30 months in prison for selling access to tens of thousands of hacked DraftKings accounts, closing a federal cybercrime case that a...
Kamerin Stokes sentenced for DraftKings account-selling scheme
Law EnforcementHow related: Joseph Garrison received an 18-month imprisonment sentence in January 2024, while Kamerin Stokes received a 30-month sentence in April 2026.
About this happening: Kamerin Stokes was sentenced to 30 months in prison for selling access to tens of thousands of hacked DraftKings accounts, closing a federal cybercrime case that a...
DraftKings hit by network compromise
Incident
H score35
First: 17.04.2026 10:10
Last: 17.04.2026 10:10
Sources 1
About this happening:
DraftKings suffered a credential-stuffing account compromise that exposed nearly 68,000 accounts and enabled theft from roughly 1,600 accounts. Attackers reused cr...
DraftKings hit by network compromise
IncidentAbout this happening: DraftKings suffered a credential-stuffing account compromise that exposed nearly 68,000 accounts and enabled theft from roughly 1,600 accounts. Attackers reused cr...
DoJ seizure of $61 million Tether in pig butchering case
Law Enforcement
H score36
First: 27.02.2026 20:11
Last: 27.02.2026 20:11
Sources 1
About this happening:
The U.S. Department of Justice seized $61 million in Tether tied to pig butchering cybercrime, cutting into wallets used to launder stolen cryptocurrency investmen...
DoJ seizure of $61 million Tether in pig butchering case
Law EnforcementAbout this happening: The U.S. Department of Justice seized $61 million in Tether tied to pig butchering cybercrime, cutting into wallets used to launder stolen cryptocurrency investmen...
Timeline
-
25.06.2026 00:55 1 articles · 21d ago
Nathan Austad sentenced for DraftKings account-takeover scheme
Legal Policy Action UpdateNathan Austad, aka "Snoopy," was sentenced to 18 months in prison for his role in the DraftKings credential-stuffing campaign tied to the November 2022 account takeover. He had pleaded guilty to conspiracy to commit computer intrusion and admitted that he and co-conspirators compromised 60,000 DraftKings user accounts, added payment methods to 1,600 accounts, and stole $600,000.
Show sources
- DraftKings hacker 'Snoopy' sentenced to 18 months in prison — www.bleepingcomputer.com — 25.06.2026 00:55
-
15.12.2025 18:45 2 articles · 7mo ago
November 2022 betting-website credential-stuffing campaign
Initial DisclosureIn November 2022, attackers began testing stolen credential pairs against the betting platform to find reused passwords. Successful logins were then used to take over accounts and monetize the access.
Show sources
- Third Defendant Pleads Guilty in Fantasy Sports Betting Hack Case — www.infosecurity-magazine.com — 15.12.2025 18:45
- Third Defendant Pleads Guilty in Fantasy Sports Betting Hack Case — www.infosecurity-magazine.com — 15.12.2025 18:45