CPR: The malware Inferno Drainer is still active, having stolen $9 million in cryptocurrency assets in the past 6 months
ChainCatcher news, according to Decrypt, the latest report from cybersecurity company Check Point Research (CPR) shows that the cryptocurrency theft malware Inferno Drainer, which claimed to cease operations in November 2023, is still active and has stolen over $9 million in the past six months. This malware has attacked more than 30,000 cryptocurrency wallets, primarily targeting Ethereum and BNB Chain users.Researchers found that the smart contract of Inferno Drainer has continued to operate since its deployment in 2023, with the latest version using single-use smart contracts and on-chain encryption configurations, significantly enhancing its stealth. Its command and control servers obfuscate communication through proxy systems, making the attacks harder to trace. Recently, this malware has implemented phishing by spoofing the verification interface of the well-known Discord bot Collab.Land, using "subtle visual differences" to trick users into signing malicious transactions.CPR warns that since the legitimate Collab.Land itself requires wallet signature verification, even experienced users may lower their guard. CPR advises users to verify the authenticity of the platform before connecting their wallets.
