<p>The Singapore Police Force (SPF) and the Cyber Security Agency of Singapore (CSA) have jointly issued an <a href="https://www.csa.gov.sg/alerts-advisories/Advisories/2024/ad-2024-002" rel="noopener noreferrer nofollow">advisory</a> to raise awareness about the escalating use of cryptocurrency drainers in cyberattacks.</p><p>The advisory aims to inform citizens about the threat and provide recommendations to protect against such attacks, with a specific emphasis on utilizing hardware wallets for enhanced security. Cryptocurrency drainers represent a form of malware that specifically targets crypto wallets. These malicious tools are often employed in phishing attacks to illicitly extract funds from users’ wallets without proper authorization.</p><h2 id="header-0">Drainer-as-a-service threat</h2><p>Of particular concern are commercial crypto draining kits, which empower less experienced cyber-criminals with sophisticated malware at no upfront costs. Operating on a drainer-as-a-service (DaaS) model, attackers share a predetermined percentage of the stolen funds with the service provider.</p><p>The SPF and CSA underscored that crypto-drainer-related attacks typically originate from phishing campaigns. These campaigns commonly involve infiltrating verified social media accounts or dispatching fraudulent emails to users from compromised databases of major service providers.</p><p>Unsuspecting victims who click on phishing links are redirected to counterfeit trading websites that prompt them to connect their Web3 wallets. Subsequently, a malicious smart contract is injected into the victim’s system, enabling hackers to withdraw funds without additional authorization.</p><h2 id="header-1">MS Drainer and Inferno Drainer</h2><p>While no such attacks have been reported in Singapore to date specifically, the advisory acknowledges the rising recognition of this threat among hackers. Notably, an off-the-shelf crypto drainer called MS Drainer contributed to hackers stealing $59 million worth of cryptocurrency in 2023.</p><p>Last month, Singapore-based cyber security firm Group-IB produced a <a href="https://www.group-ib.com/blog/inferno-drainer/" rel="noopener noreferrer nofollow">report</a> concerning the Inferno Drainer operation. According to the company’s research, the malware operation led to the theft of $80 million in digital assets globally, until the developers behind it shut it down last November.</p><p>In December, the Pink Drainer hacking group notched up <a href="https://x.com/realScamSniffer/status/1740525482733629460?s&#61;20%2F" rel="noopener noreferrer nofollow">another victim</a>, to the tune of $4.4 million in LINK tokens. Last week blockchain security firm Scam Sniffer <a href="https://x.com/realScamSniffer/status/1750874583144824983?s&#61;20" rel="noopener noreferrer nofollow">reported</a> that $10 million in digital assets had been stolen in phishing-related incidents over the course of just five days.</p><h2 id="header-2">Hardware wallets</h2><p>To counteract these threats, Singapore authorities recommend the use of hardware wallets as a security measure against wallet drainer attacks. Additionally, the advisory instructs crypto investors to conduct thorough research before engaging with cryptocurrency services or platforms. Singaporeans are encouraged to report any suspicious incidents related to crypto drainers or phishing attacks to both relevant authorities and crypto service providers.</p><p>In the event of a security breach, victims are urged to revoke any suspicious token approvals and promptly transfer their remaining funds to a different, secure wallet address to prevent further losses. This proactive approach aims to empower individuals with the knowledge and tools needed to navigate the risks associated with crypto drainers and foster cybersecurity awareness within the cryptocurrency ecosystem.</p><p>As the threat landscape evolves relative to digital assets, this advisory serves as a valuable resource to educate citizens about the risks posed by crypto drainers.</p>

Singapore police suggest hardware wallets to combat malware

Table of Contents

CoinNess Global

Other articles published on Feb 2, 2024

Tether launches educational program aimed at developing Web3 skills

Binance Announces Listing of Pyth Network’s PYTH Token – Sees 25% Price Surge

Solana (SOL) Jumps 15% to End Bearish Stalemate, Intriguing Bull Plot Ahead

Here’s How Bitcoin (BTC) Price Will Perform in February

Binance exchange freezes $4.2 million worth of XRP that was stolen from Chris Larsen’s accounts

Binance Faces Hurdles in UK Return Amid Regulatory Reluctance

Join our free newsletter for daily crypto updates!