Inferno Drainer malware makes a comeback, stealing $9 million from crypto wallets in the past 6 months

Odaily News The latest report from cybersecurity company Check Point Research (CPR) shows that the cryptocurrency-stealing malware Inferno Drainer, which claimed to have ceased operations in November 2023, is still active and has stolen more than $9 million in the past six months. The malware has attacked more than 30,000 crypto wallets in total, mainly targeting Ethereum and BNB Chain users. Researchers found that Inferno Drainer's smart contract continued to operate after being deployed in 2023. The latest version uses a single-use smart contract and on-chain encryption configuration, which significantly improves concealment. Its command and control server uses a proxy system to confuse communications, making attacks more difficult to track. Recently, the malware has implemented phishing by forging the verification interface of the well-known Discord robot Collab.Land, using "subtle visual differences" to induce users to sign malicious transactions. CPR warned that experienced users may also lower their vigilance because the genuine Collab.Land itself requires wallet signature verification. CPR recommends that users be sure to verify the authenticity of the platform before connecting to their wallet. (Decrypt)