Safe

Freedom

Nova

ERC20

A development team that produces a scam-as-a-service wallet drainer has taken the unusual step of registering as a business in the UK.&nbsp;
According to blockchain security firm CertiK, the phishing software developer, Crypto Grab, produces the “Nova Drainer” application as a “drainer” or “phishing” product. The company has become listed on the official website of Companies House, the UK Government agency that oversees business registrations.
CryptoGrab has argued that this business registration will allow it to be seen as legitimate, helping it to obtain EV SSL certificates (Extended Validation Certificates).&nbsp;
Wallet drainers are Web3 protocols that scammers <a href="https://cointelegraph.com/news/cypto-drainers-pink-pussy-venom-and-inferno-steal-millions">use to steal cryptocurrency</a>, usually by tricking victims into visiting malicious websites and making token approvals. Over $300 million <a href="https://cointelegraph.com/news/cypto-drainers-pink-pussy-venom-and-inferno-steal-millions">was lost to these programs</a> over the course of 2023, according to security platform Scam Sniffer.
Through its official Telegram group, the developer of Nova Drainer advertises its software as “steals ERC20 tokens” and “steals ETH [Ether].”
<figure>
 <img src="https://s3.cointelegraph.com/uploads/2024-02/30b98ef1-ba0a-4012-bbfd-53190b9c75d6.png">
 <figcaption style="text-align: center;">
 Nova Drainer advertisement. Source: Nova Drainer, Telegram
 </figcaption>
</figure>
The team also markets this software through its official website, Cryptograb.io, where it claims to be “Your Gateway to Crypto Affiliate Success.” An embedded YouTube video on the site advertises “phishing” and “drainer” products.
<figure>
 <img src="https://s3.cointelegraph.com/uploads/2024-02/394f4b60-8c0e-4713-a1e1-d704a2ad0ec2.png">
 <figcaption style="text-align: center;">
 Nova Drainer YouTube video. Source: CryptoGrab.io.
 </figcaption>
</figure>
The name on the official business registration <a href="https://find-and-update.company-information.service.gov.uk/company/15422095" target="_blank" rel="noopener nofollow">is</a> Crypto Grab Limited, roughly matching the one found on the website. In addition, the software’s documents at read.cryptograb.org proudly display the company’s Certificate of Incorporation as evidence that the developer is seen as legitimate.
Related: <a href="https://cointelegraph.com/news/angel-drainer-attack-gnosis-safe-vault-contract-etherscan">Angel Drainer targets users with malicious Safe contract: $403K stolen</a>
<figure>
 <img src="https://s3.cointelegraph.com/uploads/2024-02/8b11a012-6734-4dd9-88fe-f86975383352.png">
 <figcaption style="text-align: center;">
 CryptoGrab Certificate of Incorporation. Source: Cryptograb.org.
 </figcaption>
</figure>
CryptoGrab has since stated that this registration allows it to obtain EV SSL certificates, which “confirms our reliability and opens access to major suppliers such as Binance, StormGain, Etoro, and others.”
In its Company House registration, Crypto Grab lists 100-101 Museum Street, London, England, WC1A 1PB as the address for its headquarters and Bradley Robertson as its director, which CertiK claimed was “almost certainly [a] fake identity.” A note on the Companies House website states that the agency “does not verify the accuracy of the information filed” as it can only perform “basic checks” to ensure that documents are fully completed.
In the report seen by Cointelegraph, CertiK claimed that it investigated phishing sites linked to Nova Drainer and discovered three contract addresses used in the scam operation. One of them is <a href="https://etherscan.io/address/0x00000751E8310fE25912aFD7B347C2612b400000" target="_blank" rel="noopener nofollow">located</a> at an address ending in 00000. After studying these addresses, CertiK concluded that Nova Drainer “takes approximately 30% of the stolen funds” as a fee for itself, leaving the rest of the loot to the client who creates the phishing site. So far, over 7,000 transactions have been made using these contracts, the report stated.
According to Companies House, if a person believes that a registration contains false information, they can <a href="https://www.gov.uk/government/organisations/companies-house/about/complaints-procedure#what-complaints-we-can-help-with" target="_blank" rel="noopener nofollow">submit</a> a complaint through email. In a March 14 response to a Freedom of Information request, the agency <a href="https://www.whatdotheyknow.com/request/alleged_fraud_at_companies_house" target="_blank" rel="noopener nofollow">stated</a> that “when a complaint is received every attempt is made to contact the company and its officers to clarify if a genuine mistake has occurred or if indeed there is fraudulent activity.” However, “Companies House has no Investigatory Powers and is therefore unable to investigate allegations of fraud.”&nbsp;The agency claimed that when it suspects fraud has occurred, it forwards the information to police. It also suggested that victims of fraud should make a report to the Action Fraud hotline.
Related: <a href="https://cointelegraph.com/news/uk-police-may-be-ill-equipped-to-handle-crypto-crimes">UK's Action Fraud may be ineffective against crypto crime — Fraud victim</a>

ERC20 wallet drainer receives UK business registration

Cointelegraph

Other articles published on Feb 22, 2024

Andreessen Horowitz and Binance Bet Big on This Ethereum Restaking Protocol

BNB Price Jumps Surprising 7% as Binance Makes Burn Announcement

This Top-50 Altcoin Backed by Bitcoin Billionaires Could Explode 100% in Coming Months, According...

Satoshi Nakamoto’s Emails Revealed from 4 Months Before He Created Bitcoin: Seen for the First Time

Sponge Staking And Bridging Blasts Past $10m, Ethereum And Polygon SPONGE V2 Yields At 190% And 968%

Why is Kelexo (KLXO) Securing So Much Ripple (XRP) & Chainlink (LINK) Investment And How Do Its L...

Join our free newsletter for daily crypto updates!