Back to cases
AF-SCN-1488Account takeoverCIS / EU
Project Keystone
Compromise of a corporate exchange account: 2FA substitution and a burst of overnight withdrawals.
Anonymised composite scenarios assembled from recurring matter patterns. They are not promises of outcome.
- Reference
- AF-SCN-1488
- Region
- CIS / EU
- Duration
- 2 mo.
- Related case
- $640K
Challenge
The operator had already changed the contact email. The venue required a court-ready chronology, not chat screenshots.
Approach
We assembled device logs, IP chronology, venue emails and on-chain exits, then filed the pack through the compliance channel.
Outcome
Two outbound transfers were reversed. Credentials were restored. Access recommendations were adopted.