Hackers hijack a dozen DeFi websites, all registered with Name.com, and steal about $138,000
animalverse.social/community/p/...
#DeFiHack #NameDotCom #DNSHijacking #StepDrainer #CryptoHack #WalletDrainer #Blockaid #Vercel #BlockchainSecurity #CryptoNews
animalverse.social/community/p/...
#DeFiHack #NameDotCom #DNSHijacking #StepDrainer #CryptoHack #WalletDrainer #Blockaid #Vercel #BlockchainSecurity #CryptoNews
October 31, 2026 at 8:56 PM
Hackers hijack a dozen DeFi websites, all registered with Name.com, and steal about $138,000
animalverse.social/community/p/...
#DeFiHack #NameDotCom #DNSHijacking #StepDrainer #CryptoHack #WalletDrainer #Blockaid #Vercel #BlockchainSecurity #CryptoNews
animalverse.social/community/p/...
#DeFiHack #NameDotCom #DNSHijacking #StepDrainer #CryptoHack #WalletDrainer #Blockaid #Vercel #BlockchainSecurity #CryptoNews
Blockaid warns StepDrainer toolkit is hijacking front ends at Kintsu, Flap and Stonkbrokers
Blockaid says it detected an ongoing front-end attack using the StepDrainer toolset against the kintsu, flap and stonkbrokers websites, with malicious scripts injected into the compromised sites. The…
Blockaid says it detected an ongoing front-end attack using the StepDrainer toolset against the kintsu, flap and stonkbrokers websites, with malicious scripts injected into the compromised sites. The…
Blockaid warns StepDrainer toolkit is hijacking front ends at Kintsu, Flap and Stonkbrokers
lookonchain.com
October 31, 2026 at 2:45 AM
Blockaid warns StepDrainer toolkit is hijacking front ends at Kintsu, Flap and Stonkbrokers
Blockaid says it detected an ongoing front-end attack using the StepDrainer toolset against the kintsu, flap and stonkbrokers websites, with malicious scripts injected into the compromised sites. The…
Blockaid says it detected an ongoing front-end attack using the StepDrainer toolset against the kintsu, flap and stonkbrokers websites, with malicious scripts injected into the compromised sites. The…
Emerging hybrid attack ecosystems merge crypto-themed threats with traditional cybercrime, using dynamic script injection and obfuscated payloads to automate multichain asset theft via tools like StepDrainer and EtherRAT. #WalletPhishing #Web3Attacks
Crypto Drainers as a Converging Threat: Insights into Emerging Hybrid Attack Ecosystems
Crypto‑themed threats and traditional cybercrime infrastructures are converging: credential‑harvesting, loader, and botnet ecosystems are being repurposed to host polished wallet‑phishing pages and drainer tooling that automate multichain asset theft. The report analyzes two cases—StepDrainer (a multichain drainer leveraging Web3Modal and automated stealing methods) and EtherRAT (a hybrid Windows implant delivered via a trojanized TFTP/MSI installer) —highlighting techniques such as dynamic script injection, obfuscated JavaScript payloads, on‑chain configuration, and persistence via registry Run keys. #StepDrainer #EtherRAT
www.hendryadrian.com
April 23, 2026 at 6:15 PM
Emerging hybrid attack ecosystems merge crypto-themed threats with traditional cybercrime, using dynamic script injection and obfuscated payloads to automate multichain asset theft via tools like StepDrainer and EtherRAT. #WalletPhishing #Web3Attacks
LevelBlue SpiderLabs details how StepDrainer & EtherRAT blur the line between crypto drainer ecosystems & traditional malware operations, resulting in a blended threat model built for stealthy theft of digital assets across both web & Windows infection paths. www.levelblue.com/blogs/spider...
April 28, 2026 at 10:01 AM
LevelBlue SpiderLabs details how StepDrainer & EtherRAT blur the line between crypto drainer ecosystems & traditional malware operations, resulting in a blended threat model built for stealthy theft of digital assets across both web & Windows infection paths. www.levelblue.com/blogs/spider...