US charges two more suspects with DraftKing account hacks

The report describes a widespread credential-stuffing campaign in late 2022–early 2023 that compromised tens of thousands of consumer accounts at DraftKings, FanDuel, and Chick-fil-A, resulting in hundreds of thousands of dollars stolen and large volumes of hijacked accounts sold via online 'shops'. Law enforcement arrested and charged multiple individuals; seized evidence included OpenBullet/SilverBullet configs, massive username/password wordlists, and instructions used to 'cash out' compromised accounts.