Hackers Abandon Phishing Drainers Amid Capture Risk

4 Min Read

  • Cybersecurity experts highlight a decline in the use of phishing “drainers” by hackers due to increased risk of detection.
  • Popular phishing tools like Inferno, Pink, and Monkey Drainer are being abandoned by cybercriminals.
  • Heightened attention from law enforcement and crypto analysts is deterring the use of these malicious programs.
  • Despite a decrease in stolen funds, phishing incidents continue to rise, indicating persistent threats in the crypto space.

Crypto Scammers Retreat: Phishing “Drainers” Lose Appeal Amidst Rising Risks

In a significant shift, cybersecurity analysts have observed a retreat among hackers from widely used phishing tools known as “drainers.” These software applications, such as Inferno, Pink, and Monkey Drainer, have been instrumental in facilitating unauthorized access to user assets, leading to substantial financial theft. However, recent developments indicate that cybercriminals are abandoning these tools due to increasing pressures from law enforcement agencies and crypto analysts tracking down the creators of these malicious programs.

The Decline of Drainers

Drainers are notorious for their ability to trick users into authorizing fake transactions, thereby gaining access to their funds. Once access is granted, the software automatically transfers the victim’s assets to hacker-controlled accounts. Among the most infamous projects in this category are Monkey Drainer, Pink Drainer, and Inferno Drainer. Experts estimate that the creators of these programs have collectively stolen hundreds of millions of dollars. For instance, the developers behind Pink Drainer have claimed responsibility for the theft of over $75 million.

Crypto Detectives on the Hunt

Crypto detectives, including figures like ZachXBT, are actively pursuing the creators of these drainers. They meticulously track the addresses used by these cybercriminals, aiming to freeze stolen funds and identify connections between the fraudulent software and specific users. In one investigation, analysts linked an individual known as Konpyl to the Inferno Drainer, noting that a significant portion of the stolen assets ended up in wallets associated with this alias. It remains unclear whether Konpyl is one of the drainer’s creators or merely a “dirty” trader aiding in money laundering.

Increased Vigilance and User Awareness

The heightened focus on phishing software from law enforcement and on-chain detectives is forcing cybercriminals to reconsider their strategies. The closure of the Pink Drainer project in May 2024 and the reported cessation of Inferno Drainer’s operations in October underscore this trend. Additionally, users are increasingly adopting browser extensions and wallet protection systems to safeguard against phishing threats. These tools alert individuals to potential risks and block suspicious transactions, reducing the effectiveness of drainers.

Persistent Threats Despite Decreased Losses

While the amount of stolen funds has decreased by 56%, the number of phishing incidents has risen by 20%, according to data from Scam Sniffer. In October 2024 alone, over 12,000 users lost $20.2 million due to crypto phishing scams. This underscores the ongoing challenges in combating cybercrime within the cryptocurrency domain. On-chain detectives caution against taking hackers’ claims of ceasing operations at face value, as these announcements may serve as a diversion to lower vigilance among potential victims and authorities.
In summary, the growing awareness and proactive measures by law enforcement and crypto analysts are reshaping the landscape of crypto-related crimes. However, the persistent rise in phishing incidents highlights the need for continued vigilance and innovation in cybersecurity measures to protect users in the ever-evolving digital financial space.

Ripple Labs Wins Final US Approval to Establish Trust Bank

Ripple Labs said the US Office of the Comptroller of the Currency gave final approval for Ripple National Trust Bank, which will manage segregated RLUSD reserves and provide digital asset…

3 Min Read
Bybit AI Adds Long-Term Memory to Personalize Responses

Bybit has added personalization and long-term memory to its Bybit AI assistant, allowing it, with user consent and set permissions, to use account data to tailor responses and analytics.

3 Min Read
CoinDCX Loses Nearly $16 Million in Legacy Wallet Attack

CoinDCX said an attack on legacy wallet infrastructure caused a 15.99 million USDT loss, which it covered with its own funds, while ZachXBT criticized its response and urged users to…

5 Min Read
Vitalik Buterin Backs Limits on Kimi 3.1 AI Model’s Cyber Capabilities

Ethereum co-founder Vitalik Buterin on Oct. 26, 2026, backed Kimi 3.1’s exclusion of advanced offensive cyber capabilities from training data, saying society needed time to strengthen defenses.

3 Min Read
Anthropic Files for IPO on Nasdaq

Anthropic said on October 26, 2026, that it filed an S-1 with the SEC for a Nasdaq IPO under ticker ANT, led by Goldman Sachs and Morgan Stanley, with terms…

3 Min Read