According to PANews, blockchain investigation firm Darkbit has uncovered a new scam service called Vanilla Drainer, which has stolen at least $5.27 million in cryptocurrency over three weeks. The organization assists fraudsters by providing phishing software and takes a 15%-20% commission from the stolen funds.
Vanilla Drainer has been active since October 2024, promoting its ability to bypass security detection platforms like Blockaid. On August 5, the largest single theft involved a loss of $3.09 million in stablecoins, with the operator profiting $463,000. The stolen funds are typically converted into ETH or non-freezable stablecoin DAI and eventually consolidated into a specific wallet, which currently holds tokens valued at $2.23 million.
To evade detection, Vanilla Drainer creates new contracts for each malicious website and frequently changes domain names.