Kamerin Stokes, 23, was sentenced to 30 months in prison for selling access to tens of thousands of DraftKings accounts hijacked in a November 2022 credential-stuffing attack linked to Nathan Austad and Joseph Garrison. After pleading guilty, briefly reopening his shop as TheMFNPlug with the tagline “fraud is fun,” and violating pretrial release, Stokes was remanded and ordered to pay $1,327,061 in restitution and $125,965.53 in forfeiture with three years of supervised release. #DraftKings #KamerinStokes
Keypoints
- Stokes sold access to tens of thousands of compromised DraftKings accounts.
- A November 2022 credential-stuffing campaign by Nathan Austad (aka Snoopy) and Joseph Garrison compromised nearly 68,000 accounts.
- Attackers used credentials from multiple breaches, resulting in about $635,000 stolen from 1,600 accounts and over $2.1 million earned selling accounts.
- After pleading guilty, Stokes reopened his shop as TheMFNPlug with the tagline “fraud is fun” and was later arrested for violating pretrial release.
- He was sentenced to 30 months in prison, three years supervised release, and ordered to pay $1,327,061 in restitution and $125,965.53 in forfeiture.