EddieJayonCrypto
10 May 25
The Inferno Drainer crypto-stealing malware, despite claiming to have shut down in November 2023, remains active and has stolen over $9 million from more than 30,000 crypto wallets in the past six months. Cybersecurity firm Check Point Research found that the malware targets Ethereum and Binance Cha...
Inferno Drainer malware continues to operate despite claims of shutdown, stealing over $9 million from more than 30,000 crypto wallets within six months. The malware targets Ethereum and Binance Chain wallets, employing advanced evasion techniques such as single-use smart contracts, encrypted on-chain configurations, and proxy-based command servers. A sophisticated Discord phishing campaign impersonates the Collab.Land bot, tricking users into signing malicious transactions that enable wallet draining. Cybercriminals refine fake verification interfaces to exploit even seasoned crypto users, underscoring the necessity of careful wallet authentication practices. Inferno Drainer’s resurgence mirrors a broader trend of increasingly sophisticated crypto-stealing malware attacking diverse platforms and devices.
Cybersecurity analysis reveals that Inferno Drainer’s JavaScript code and blockchain activity confirm its ongoing operation since a purported shutdown in November 2023. The malware’s use of single-use smart contracts and encrypted configurations makes detection and prevention significantly more difficult. Proxy-based obfuscation of command-and-control communications further complicates tracking efforts. The Discord phishing scheme redirects users from legitimate Web3 project sites to counterfeit verification interfaces, effectively harvesting wallet credentials. Subtle visual differences in the fake Collab.Land bot deceive users, making vigilance essential even for experienced individuals. This campaign generates a stable illicit financial flow, confirmed via blockchain transaction analysis.
The rise of Inferno Drainer coincides with a wave of advanced crypto malware campaigns exploiting hacked mailing lists, open-source software libraries, and counterfeit devices. Crypto users are strongly advised to verify wallet connection requests and remain cautious of unfamiliar platforms and interfaces. The evolution of such malware highlights the growing sophistication of cyber threats in the cryptocurrency ecosystem.