TLDR InfoSec · MISCELLANEOUS

BURNOUT: INFERNO DRAINER’S MULTIMILLION-DOLLAR SCAM SCHEME DETAILED

group-ib.com8 min read

Summary from the TLDR InfoSec newsletter

The now inactive Inferno Drainer scam created over 16,000 malicious domains from 2022-2023 to phish cryptocurrency wallet credentials using high-quality phishing pages spoofing Web3 protocols. It scammed over 137,000 victims and stole $87 million. Inferno Drainer offered its scam-as-a-service malware to affiliates for 20% of earnings. It spoofed 100+ crypto brands via phishing sites on the 16,000+ domains.