Read

Force

Singapore authorities issued a cybersecurity warning to citizens after taking notice of the rising use of cryptocurrency drainers or wallet drainers for stealing funds from investors across the ecosystem.
The Singapore Police Force (SPF) and the Cyber Security Agency of Singapore (CSA) <a href="https://www.csa.gov.sg/docs/default-source/publications/singcert/2024/joint-advisory---protecting-yourself-from-crypto-drainers.pdf?sfvrsn=cbbe738b_1" target="_blank" rel="noopener nofollow">issued</a> a joint advisory to raise awareness against cyberattacks involving crypto drainers, a type of malware that targets crypto wallets. Phishing attacks make use of crypto drainers to extract funds from users’ wallets without authorization. 
<blockquote class="twitter-tweet">
 (1/2) As the use of cryptocurrencies become increasingly popular, cybercriminals are also increasingly leveraging crypto drainers to target owners of cryptocurrency wallets.— CSA (@CSAsingapore) <a href="https://twitter.com/CSAsingapore/status/1752528205918179361?ref_src=twsrc%5Etfw">January 31, 2024</a>
</blockquote> 
The authorities raised concerns about commercial crypto draining kits, which allow novice cybercriminals to arm up with sophisticated malware at no upfront costs. Instead, attackers using the drainer-as-a-service (DaaS) model will split a pre-determined percentage of the loot with the service provider. 
As pointed out by the SPF and CSA pointed out, crypto-drainer-related attacks start with phishing campaigns — usually involving hacking into <a href="https://cointelegraph.com/news/sec-twitter-account-hacked-2fa-x-reveals">prominent social media accounts</a> or sending out fraudulent emails to users from <a href="https://cointelegraph.com/news/coordinated-crypto-investor-phishing-campaign-email-alert">hacked databases of major service providers</a>.
<blockquote class="twitter-tweet">
 (2/2) CSA and @singaporepoliceforce have issued an advisory on the use of crypto drainers to facilitate cryptocurrency theft and how individuals can protect themselves from it. Read the join advisory here. <a href="https://t.co/FCnjkjrRdE">https://t.co/FCnjkjrRdE</a>— CSA (@CSAsingapore) <a href="https://twitter.com/CSAsingapore/status/1752528380556390805?ref_src=twsrc%5Etfw">January 31, 2024</a>
</blockquote> 
Unsuspecting victims who end up clicking the phishing links get redirected to a fake trading website that prompts users to connect their Web3 wallets. A malicious smart contract is then injected into the victim’s system, allowing hackers to withdraw funds without further authorization. 
Related: <a href="https://cointelegraph.com/news/inferno-drainer-shut-down-after-stealing-millions-crypto-wallet-scam-kit">Inferno Drainer says it’s shutting down after helping steal $70M in crypto</a>
Such an attack has not yet been reported in Singapore, according to the advisory. However, the practice has gained recognition among hackers. MS Drainer, a popular off-the-shelf crypto drainer, helped <a href="https://cointelegraph.com/news/ms-drainer-scammers-used-google-ads-swipe-59-million-crypto-scam-sniffer">hackers steal $59 million worth of cryptocurrency in 2023</a>. 
<blockquote class="twitter-tweet">
 1/ Alert: A 'Wallet Drainer' has been linked to phishing campaigns on Google search and X ads, draining approximately $58M from over 63K victims in 9 months. <a href="https://t.co/ye3ob2uTtz">pic.twitter.com/ye3ob2uTtz</a>— Scam Sniffer | Web3 Anti-Scam (@realScamSniffer) <a href="https://twitter.com/realScamSniffer/status/1737799062328660384?ref_src=twsrc%5Etfw">December 21, 2023</a>
</blockquote> 
The stolen funds are often siphoned out using services that deter traceability, such as cryptocurrency mixers, and heavily reduce chances for recovery.&nbsp;
Singapore authorities recommended the use of hardware wallets for security against wallet drainer attacks, among other precautions. While advising crypto investors to do thorough research, the advisory asks Singaporeans to report any such incident to the authorities and the crypto service providers.
Most importantly, in such instances, victims must revoke any suspicious token approvals and transfer the remaining funds to a different secure wallet address to avoid further loss of funds. 
Magazine: <a href="https://cointelegraph.com/magazine/mystery-polygon-missing-matic-everyone-doing-it-chainargos/">Mystery of Polygon’s missing MATIC: Everyone’s doing it, says ChainArgos</a>

Singapore police recommend hardware wallets against crypto drainers

Cointelegraph

Other articles published on Feb 1, 2024

Scorpion Casino’s Role in Shaping the Future of Crypto-Based Gambling

Binance Refutes Reports on Highly Sensitive Data on GitHub, Marks It Outdated

Ethereum-based token experiences volatile surge following Solana airdrop mix-up

Jupiter Price (JUP) Tanks 70% on Airdrop, Another Pump and Dump?

XRPL approves AMM amendment, opening new income avenues

Insights into Bitcoin Market Trends and Spot ETF Developments

Join our free newsletter for daily crypto updates!