Cryptocurrency fraud is on the rise! – Assessment from Kaspersky that interest in “drainer” tools is increasing
According to a statement from the Russian cybersecurity company, Kaspersky Digital Footprint Intelligence experts observed a significant increase in discussions about crypto drainers on the dark web in 2024.
According to the latest data from Kaspersky Security Bulletin, the number of discussion threads about drainers on the “Dark Web” market increased by 135 percent, rising from 55 in 2022 to 129 in 2024. In these threads, cybercriminals discuss topics ranging from buying and selling such malware to teaming up for distribution.
According to Kaspersky experts, the drainer’s common methods included fake airdrops, phishing sites, malicious browser add-ons, deceptive ads, malicious smart contracts, and fake NFT marketplaces. An increase in corporate database ads was observed on one of the popular darknet forums. Specifically, between August and November 2024, the number of posts related to database trading increased by 40 percent compared to the same period last year. This has revealed that cybercriminals are increasingly focusing on data breaches.
Given the increasing trend in supply chain and similar attacks, 2025 is expected to see an increase in data breaches in general, especially breaches resulting from attacks against contractors of large companies.
The proliferation of cybercriminals, thieves and dumpers through “Malware-as-a-Service” and the rise in various cyber threats targeting the Middle East were other prominent trends in the research.
“INTEREST MAY INCREASE FURTHER”
Kaspersky Digital Footprint Intelligence Security Expert Alexander Zabrovsky, whose views were included in the statement, emphasized that, considering these trends, cybercriminals’ interest in crypto-drainers and related attacks may increase even more in 2025.
Stating that this situation requires crypto enthusiasts to be more careful than ever and adopt strong crypto security measures, Zabrovsky said:
“It is critical for companies to actively monitor their online presence while focusing on educating their customers and employees in reducing the risk of successful attacks. Drainers often aim to steal funds using social engineering tactics. By abusing well-known wallet and exchange brands, they force victims to disclose wallet information or It is very important to regularly investigate posts made on behalf of the brand in search engines, social media and marketplaces. When any phishing or fake site is detected, it is quickly removed and protected from potential victims. “The use of special tools to improve this monitoring process can be very useful.”
Pointing out that not every data breach announcement on the black market is based on a real incident, Zabrovsky said, “Some offers may just be well-marketed content. For example, some databases may bring together publicly available information or previously leaked data and present it as a new incident. With such claims, cyber “Criminals can attract attention, set the agenda, and damage the reputation of the targeted company simply by announcing a data breach. This highlights the increasing importance of monitoring company name and assets on the dark web.”