Drainers as a Service Makes Financial Fraud Accessible to Less-Skilled Criminals

Summary

Drainers as a Service packages tools for stealing cryptocurrency or traditional financial assets, often through subscriptions or affiliate programs. The article describes their use, sale, and risks to individuals and organizations.

Key points

• Drainers are malicious tools intended to take cryptocurrency or traditional financial assets from compromised accounts, wallets, or online platforms.
• The article says drainers may be delivered through phishing kits that steal credentials or malware that collects information about financial transactions.
• Some drainers can automatically transfer funds to an account or wallet designated by the threat actor.
• Providers advertise access through dark web forums and Telegram, offering subscriptions, updates, support, or tutorials.
• Some sellers offer drainers directly or through affiliate programs that charge a commission on stolen funds.
• Tools may support only certain cryptocurrencies or wallet types; some providers offer customization, and the article also describes tools targeting bank accounts.

MITRE ATT&CK