November 2022 betting-website credential-stuffing campaign
Campaign
Summary
Hide ▲
Show ▼
The November 2022 credential-stuffing campaign against a betting platform compromised more than 60,000 accounts and drove about $600,000 in theft from affected customers. Attackers used stolen login credentials to access user accounts, add payment methods, and empty balances. The operation also fed a market for compromised-account resale, indicating an organized fraud pipeline rather than a one-off intrusion.
Related Happenings
DraftKings hit by account takeover attack
Incident
H score34
First: 25.06.2026 00:55
Last: 25.06.2026 00:55
Sources 1
How related:
In November 2022, DraftKings disclosed that hackers accessed customer accounts through credential stuffing attacks that exploited weak passwords or reused login credentials.
About this happening:
The **DraftKings** customer-account compromise exposed **60,000 accounts** through **credential stuffing** and enabled theft from affected users. Attackers added payment methods u...
DraftKings hit by account takeover attack
IncidentHow related: In November 2022, DraftKings disclosed that hackers accessed customer accounts through credential stuffing attacks that exploited weak passwords or reused login credentials.
About this happening: The **DraftKings** customer-account compromise exposed **60,000 accounts** through **credential stuffing** and enabled theft from affected users. Attackers added payment methods u...
Scattered Spider SMS phishing and SIM-swap crypto theft campaign
Campaign
H score53
First: 20.04.2026 16:33
Last: 20.04.2026 16:33
Sources 1
About this happening:
The **Scattered Spider** campaign used **SMS phishing** and **SIM swap** attacks to steal employee credentials, hijack phone numbers, and take over email and **virtual currency wa...
Scattered Spider SMS phishing and SIM-swap crypto theft campaign
CampaignAbout this happening: The **Scattered Spider** campaign used **SMS phishing** and **SIM swap** attacks to steal employee credentials, hijack phone numbers, and take over email and **virtual currency wa...
Kamerin Stokes sentenced for DraftKings account-selling scheme
Law Enforcement
H score39
First: 17.04.2026 10:10
Last: 17.04.2026 10:10
Sources 1
How related:
Joseph Garrison received an 18-month imprisonment sentence in January 2024, while Kamerin Stokes received a 30-month sentence in April 2026.
About this happening:
**Kamerin Stokes** was **sentenced to 30 months in prison** for selling access to **tens of thousands of hacked DraftKings accounts**, closing a federal **cybercrime** case that a...
Kamerin Stokes sentenced for DraftKings account-selling scheme
Law EnforcementHow related: Joseph Garrison received an 18-month imprisonment sentence in January 2024, while Kamerin Stokes received a 30-month sentence in April 2026.
About this happening: **Kamerin Stokes** was **sentenced to 30 months in prison** for selling access to **tens of thousands of hacked DraftKings accounts**, closing a federal **cybercrime** case that a...
DraftKings hit by network compromise
Incident
H score35
First: 17.04.2026 10:10
Last: 17.04.2026 10:10
Sources 1
About this happening:
**DraftKings** suffered a **credential-stuffing account compromise** that exposed nearly **68,000 accounts** and enabled theft from roughly **1,600 accounts**. Attackers reused cr...
DraftKings hit by network compromise
IncidentAbout this happening: **DraftKings** suffered a **credential-stuffing account compromise** that exposed nearly **68,000 accounts** and enabled theft from roughly **1,600 accounts**. Attackers reused cr...
DoJ seizure of $61 million Tether in pig butchering case
Law Enforcement
H score36
First: 27.02.2026 20:11
Last: 27.02.2026 20:11
Sources 1
About this happening:
The **U.S. Department of Justice** seized **$61 million in Tether** tied to **pig butchering** **cybercrime**, cutting into wallets used to launder stolen cryptocurrency investmen...
DoJ seizure of $61 million Tether in pig butchering case
Law EnforcementAbout this happening: The **U.S. Department of Justice** seized **$61 million in Tether** tied to **pig butchering** **cybercrime**, cutting into wallets used to launder stolen cryptocurrency investmen...
Timeline
-
25.06.2026 00:55 1 articles · 14d ago
Nathan Austad sentenced for DraftKings account-takeover scheme
Legal Policy Action UpdateNathan Austad, aka "Snoopy," was sentenced to 18 months in prison for his role in the DraftKings credential-stuffing campaign tied to the November 2022 account takeover. He had pleaded guilty to conspiracy to commit computer intrusion and admitted that he and co-conspirators compromised 60,000 DraftKings user accounts, added payment methods to 1,600 accounts, and stole $600,000.
Show sources
- DraftKings hacker 'Snoopy' sentenced to 18 months in prison — www.bleepingcomputer.com — 25.06.2026 00:55
-
15.12.2025 18:45 2 articles · 6mo ago
November 2022 betting-website credential-stuffing campaign
Initial DisclosureIn **November 2022**, attackers began testing **stolen credential pairs** against the betting platform to find reused passwords. Successful logins were then used to take over accounts and monetize the access.
Show sources
- Third Defendant Pleads Guilty in Fantasy Sports Betting Hack Case — www.infosecurity-magazine.com — 15.12.2025 18:45
- Third Defendant Pleads Guilty in Fantasy Sports Betting Hack Case — www.infosecurity-magazine.com — 15.12.2025 18:45