Blockchain investigator Darkbit found that a new scam service, Vanilla Drainer, stole at least $5.27 million in cryptocurrency over a three-week period. The group helps fraudsters steal funds by providing phishing software, and takes a 15-20% cut from it. Vanilla has been active since October 2024, and its advertisements claim to bypass the security detection platform Blockaid. Vanilla avoids tracking by creating new contracts for each malicious website and changing domain names frequently.
区块链调查机构 Darkbit 发现,新的诈骗服务 Vanilla Drainer 在三周内窃取至少 527 万美元加密货币。 该组织通过提供钓鱼软件协助欺诈者盗取资金,并从中抽取 15%-20% 的分成。Vanilla 自 2024 年 10 月开始活动,其广告宣称能绕过安全检测平台 Blockaid。Vanilla 通过为每个恶意网站创建新合约、频繁更换域名等方式规避追踪。
According to blockchain security platform Scam Sniffer, phishing group Inferno Drainer recently used the Ethereum EIP-7702 upgrade feature to carry out a new type of attack, which has caused a single loss of about $150,000. EIP-7702 is a key feature in the Pectra upgrade, allowing externally owned accounts (EOAs) to temporarily have smart contract functions during transactions. The attacker uses the authorized MetaMask wallet to initiate bulk token transfer operations. Slow Mist founder Cosine p...
据区块链安全平台 Scam Sniffer 披露,钓鱼组织 Inferno Drainer 近期利用以太坊 EIP-7702 升级特性实施新型攻击,已造成单笔约 15 万美元损失。EIP-7702 是 Pectra 升级中的关键功能,允许外部拥有账户(EOA)在交易过程中临时具备智能合约功能。攻击者借助已授权的 MetaMask 钱包,发起批量代币转移操作。 慢雾创始人余弦指出,此次事件标志着钓鱼策略出现升级:...
Slow Mist founder Cosine posted on social media that the theft of 12,000 ETH from Shenyu last year was done by the Eastern European hacker group Inferno Drainer, not North Korean hackers. The coin washing mode is somewhat intersected with North Korean hackers, and the funds are difficult to recover.
慢雾创始人余弦在社交媒体上发文表示,去年神鱼 1.2 万枚 ETH 被盗系东欧黑客组织 Inferno Drainer 所为,并非朝鲜黑客。洗币模式上和朝鲜黑客有点交集,资金很难追回。
According to Scam Sniffer, 2 hours ago, the fee address of fishing group Inferno Drainer was emptied, transferring 319 ETH (806,000 USD) to multiple addresses.
According to Scam Sniffer, an hour and a half ago, the Inferno Drainer wallet address transferred 2,845 ETH (worth $7.50 million) of stolen funds to multiple new addresses.