Operation Atlantic Seizes $12m in Crypto Losses
2026-04-13T08:52:25Z•139c664d59928f504bb7952127bd7963ae17e4e86e4c2fb65b1e569ae2a83cfc
APT28AkiraDNS-hijackingDragonforceGPU-RowhammerGPUBreachMaaSQilinSTX-RATVenom-Stealerapproval-phishingaxios-compromisebrowser-session-protectioncredential-theftcryptocurrency-theftdata-breachespionage-APT-Bitter/TA416-related-events? (ambiguous)infostealerlaw-enforcement-takedownmacOS-ClickFixnpm-supply-chainphishing-platformransomwareremote-access-trojansupply-chain-compromise
What happened
Multiple high-impact cyber incidents and vulnerabilities reported: a coordinated law-enforcement action (“Operation Atlantic”) identified 20,000+ victims of approval-phishing crypto scams and seized ~$12M; three ransomware families (Qilin, Akira, Dragonforce) were responsible for 40% of March attacks and Akira can complete attacks in under an hour; Chrome added Device Bound Session Credentials to mitigate infostealers; new and evolving malware/MaaS (STX RAT, Venom Stealer/MaaS, Storm infostealer, Phantom Stealer, GrafanaGhost) target finance, executives and data exfiltration; Bitcoin Depot and
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- infosecurity_magazine
- Record identifier
- 139c664d59928f504bb7952127bd7963ae17e4e86e4c2fb65b1e569ae2a83cfc
- Enrichment time
- 2026-04-13T08:52:25Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.