Info Alliance

👎 Crypto Drainer – A malicious script embedded within a web resource that operates via a smart contract, triggered when a user signs a transaction or payload.
👨‍💻 A drainer is specifically designed to misappropriate crypto assets from users' Web3 wallets (e.g., Trust Wallet, MetaMask) across a single blockchain network or multiple networks simultaneously. The exfiltration of your funds can occur either via automated execution upon signing, or manually by the threat actor at a significantly later time.
To interact with any legitimate decentralized service (such as Uniswap), users must connect their wallet via protocols like WalletConnect and sign a transaction. Because the majority of users implicitly trust this technology and routinely approve pop-up prompts, malicious actors exploit this behavioral pattern. They deploy fraudulent infrastructure—often highly accurate clones of legitimate platforms, prominent crypto projects, or entirely new, fabricated brands.
When interacting with these phishing resources, you will similarly be prompted to connect your wallet and sign a transaction. However, you will often be hit with multiple signing requests. These transactions execute the malicious smart contract, effectively granting it sweeping permissions (token allowances) to manage the wallet and its underlying assets. Once these permissions are authorized, your tokens are automatically or manually siphoned to threat actor-controlled addresses that were pre-coded into the smart contract.
🖥 Security Recommendations:
Execute transactions exclusively on reputable, well-established Decentralized Exchanges (DEXs).Rigorously verify domain URLs against the project's official communication channels to avoid spoofed sites.Compartmentalize your risk: interact with Web3 applications using a dedicated secondary wallet. Always remember to review and sever all active connections in the "DApps" tab of your wallet application after use.Audit your token "approvals" and execute a "revoke" function at the smart contract level. Simply disconnecting from a DApp does not nullify the on-chain allowances you granted when signing the initial transaction. You can audit which smart contracts hold permissions to your wallet and revoke them automatically using tools like revoke.cash, or manually directly through the smart contract interface.
ℹ️ If your assets have been compromised, contact Info Alliance (https://t.me/infoalliance_support). Our team will assist in tracing the illicit fund flows and facilitating the asset recovery process!

#news #scam #scamriskwarning #crypto

🖥 Chainalysis analysts have calculated that over the last 5 years, approximately $100 billion in "dirty" crypto has been sent to crypto exchanges. About a third of these funds are attributed to sanctioned crypto services, while the remaining volume belongs to the darknet, various types of criminal activities, drainer programs, and malware.
At the same time, "dirty crypto" is mostly concentrated on the largest crypto exchanges, but scammers have also utilized DeFi applications, gambling sites, crypto mixers, and cross-chain bridges for money laundering. The number of "dirty" coins is high. According to the latest Chainalysis data, the volume of illegal transactions using BTC exceeded $2.8 billion per year. This seems like a significant amount, but against the backdrop of the annual volume of illegal transactions of $1-$2 trillion, it is a fraction of a percent.
1️⃣ How can one receive "dirty" tokens?
Exchanges keep records of risky transactions, stolen tokens, and wallet addresses involved in criminal activity. Perpetrators are well aware of this, so they try to exchange them for other clean cryptocurrencies or withdraw them into fiat. Often, "dirty crypto" is used to pay for services or products.
Before reaching the final recipient, coins go through a long chain of transactions. Scammers run them through mixer services, split them into parts, and use unregulated platforms, prepaid debit cards, and gambling sites. Thus, "dirty assets" can end up in wallets not only of scammers. A law-abiding user may quite accidentally become the owner of such "dirty cryptocurrency" — by receiving it as payment or buying it on unregulated platforms.
🟠 Why is "dirty cryptocurrency" dangerous?
The problem is that if "dirty" cryptocurrencies enter your wallet, the rest of the coins in it will be compromised — the exchange will assign an increased risk level to the entire wallet. Exchange security systems regard all assets and transactions of the address as equally "dirty" and suspicious. As a result, assets may be blocked on the account if the wallet belongs to an exchange. In some jurisdictions, for example, the USA, the user may face a heavy fine.
🔍 Upon seeing a risky transaction, regulated exchanges will require proof of the origin of funds (you have most likely already passed verification). Until all circumstances are clarified, they will simply block the account — this is stated in the user agreement.
ℹ️ Therefore, if you conduct a large number of crypto operations, we advise checking every received transaction and all transactions of counterparties. If help is needed, Info Alliance AML officers (https://t.me/infoalliance_support) will be happy to consult you on all possible questions!

#news #scam #scamriskwarning #crypto #BTC

⚠️ Să vorbim despre Zero Transferuri - Zero tranzacții în blockchain.
Aceasta este o vulnerabilitate parțială disponibilă în blockchain-uri care permite primirea unei tranzacții zero către orice adresă de utilizator sau trimiterea unei astfel de tranzacții de la aceeași adresă. Escrocii folosesc în continuare această caracteristică și astăzi; deși majoritatea portofelelor și a exploratorilor de blockchain marchează aceste tranzacții ca fiind frauduloase și împiedică copierea datelor lor, există în continuare aplicații care permit acest lucru.
🔍 Esența schemei este că, după fiecare dintre operațiunile tale (de exemplu, primirea/trimiterea USDT), o tranzacție zero este efectuată automat către adresa ta de portofel, unde portofelul expeditorului este foarte similar cu portofelul unei tranzacții reale pe care ai efectuat-o. Acest lucru se face astfel încât, în grabă, s-ar putea să copiezi adresa ultimei tranzacții și, după ce verifici doar caracterele întâi și ultime, să trimiți fonduri escrocilor. Astfel de portofele pot avea atât același început, cât și sfârșit al adresei simultan.