According to ChainCatcher and reported by Cointelegraph, blockchain investigation agency Darkbit discovered that the new scam service Vanilla Drainer stole at least $5.27 million in cryptocurrency within three weeks.
The organization assists fraudsters in stealing funds by providing phishing software and takes a cut of 15%-20%. Vanilla has been active since October 2024, with advertisements claiming to bypass security detection platform Blockaid.
In the largest single theft on August 5, victims lost $3.09 million in stablecoins, while the operator profited $463,000. The ill-gotten gains are typically converted into ETH or non-freezable stablecoin DAI, ultimately accumulating in a specific fee wallet, which currently holds tokens worth $2.23 million.
Vanilla evades tracking by creating new contracts for each malicious website, frequently changing domain names, and other methods.
