I would guess a mining pool but you really never know!
Glad you caught it before they could withdraw at least.
I've seen you mention ethereum mining a bit, have you used any obscure ether pools recently?
Yeah thanks i was quite lucky that I always watch my emails closely.
yes I mined it on supernova and coin-tron but I have been mining on those pools for years with the same info never seen this happen before, its a reminder to everyone to never store any funds
on an echange withoute 2FA.
I Havnt used an other lesser known pools but honestly you dont know if those pools are storing passwords in plain text and a lot of echanges dont use captcha so its possibly the brute forced the passwords once they determined the usernames were valid.