Inferno Drainer malware makes a comeback, stealing $9 million from crypto wallets in the past 6 months

Odaily Planet Daily News: The latest report from cybersecurity company Check Point Research (CPR) shows that the cryptocurrency-stealing malware Inferno Drainer, which was declared to have ceased operations in November 2023, is still active and has stolen more than $9 million in the past six months. The malware has attacked more than 30,000 crypto wallets, mainly targeting Ethereum and BNB Chain users. Researchers found that Inferno Drainer's smart contract continued to operate after being deployed in 2023, and the latest version used a single-use smart contract and on-chain encryption configuration, significantly improving its concealment. Its command-and-control servers obfuscate communications through a proxy system, making the attack more difficult to track. Recently, the malware has been used to carry out phishing by forging the verification interface of the well-known Discord robot Collab.Land, using "subtle visual differences" to trick users into signing malicious transactions. CPR warns that since the genuine Collab.Land itself requires wallet signature verification, experienced users may also lower their guard. CPR recommends that users always verify the authenticity of the platform before connecting their wallet. (Decrypt)