✨ The Containment Era is here. →Explore ✨

aviatrix logoAviatrix

Overview

Threat intelligence hub

Command Center

Visualize blast radius & threats

Under Active Attack

Executive Summary

In March 2026, Operation Atlantic, a collaborative effort led by the UK's National Crime Agency (NCA) alongside the U.S. Secret Service, Ontario Provincial Police, and Ontario Securities Commission, targeted cryptocurrency fraud across the UK, Canada, and the United States. The operation identified over 20,000 victims and froze more than $12 million in suspected criminal proceeds obtained through 'approval phishing' scams, where victims were deceived into granting access to their cryptocurrency wallets. Additionally, the operation uncovered over $45 million in stolen cryptocurrency linked to global fraud schemes. (nationalcrimeagency.gov.uk)

This incident underscores the escalating threat of sophisticated phishing attacks in the cryptocurrency sector, highlighting the necessity for enhanced security measures and international cooperation to protect digital assets. The success of Operation Atlantic demonstrates the effectiveness of public-private partnerships in combating cybercrime and sets a precedent for future collaborative efforts to safeguard investors and maintain trust in the cryptocurrency market.

Why This Matters Now

The rise of 'approval phishing' scams poses a significant risk to cryptocurrency investors, emphasizing the urgent need for robust security protocols and user education to prevent unauthorized access to digital wallets.

Attack Path Analysis

MITRE ATT&CK® Techniques

Potential Compliance Exposure

Sector Implications

Sources

Frequently Asked Questions

'Approval phishing' is a scam where victims are tricked into granting attackers access to their cryptocurrency wallets, often through deceptive investment schemes.

Cloud Native Security Fabric Mitigations and ControlsCNSF

Aviatrix Zero Trust CNSF is pertinent to this incident as it could have limited the attackers' ability to escalate privileges, move laterally, and exfiltrate funds by enforcing strict segmentation and identity-aware controls within the cloud environment.

Initial Compromise

Control: Cloud Native Security Fabric (CNSF)

Mitigation: While Aviatrix Zero Trust CNSF may not prevent initial phishing attacks, it could limit the attacker's ability to exploit granted permissions by enforcing strict access controls.

Privilege Escalation

Control: Zero Trust Segmentation

Mitigation: Aviatrix Zero Trust Segmentation could likely constrain attackers from escalating privileges by enforcing least-privilege access controls.

Lateral Movement

Control: East-West Traffic Security

Mitigation: Aviatrix East-West Traffic Security could likely limit lateral movement by monitoring and controlling internal traffic between workloads.

Command & Control

Control: Multicloud Visibility & Control

Mitigation: Aviatrix Multicloud Visibility & Control could likely detect and limit unauthorized command and control communications.

Exfiltration

Control: Egress Security & Policy Enforcement

Mitigation: Aviatrix Egress Security & Policy Enforcement could likely restrict unauthorized outbound transfers, reducing the risk of fund exfiltration.

Impact (Mitigations)

While Aviatrix Zero Trust CNSF may not prevent all financial losses, it could likely reduce the overall impact by limiting the attacker's ability to escalate privileges, move laterally, and exfiltrate funds.

Impact at a Glance

Affected Business Functions

  • Cryptocurrency Wallet Services
  • Investment Platforms
  • Financial Transactions
  • Customer Account Management
Operational Disruption

Estimated downtime: N/A

Financial Impact

Estimated loss: $45,000,000

Data Exposure

Personal and financial information of over 20,000 cryptocurrency investors across multiple countries.

Recommended Actions

  • • Implement Zero Trust Segmentation to enforce least privilege access and prevent unauthorized lateral movement within networks.
  • • Deploy Egress Security & Policy Enforcement to monitor and control outbound traffic, mitigating unauthorized data exfiltration.
  • • Utilize Threat Detection & Anomaly Response systems to identify and respond to suspicious activities in real-time.
  • • Enhance Multicloud Visibility & Control to gain comprehensive insights across cloud environments and detect anomalous interactions.
  • • Educate users on the risks of approval phishing and promote best practices for verifying transaction requests.

Secure the Paths Between Cloud Workloads

A cloud-native security fabric that enforces Zero Trust across workload communication—reducing attack paths, compliance risk, and operational complexity.

Stop Advanced ThreatsGet a Free Workload Attack Path AssessmentUnder Active Attack?
Cta pattren Image