资讯：货币消耗器对加密货币的威胁不断上升

Overview of Crypto Drainers
加密货币消耗器的概述

As the cryptocurrency market continues to evolve, so do the tactics employed by malicious actors to steal user funds. The latest threat, crypto drainers, has been gaining prevalence in recent years. In contrast to more conventional methods such as private key theft and smart contract exploitation, drainers pose as web3 projects to trick victims into granting them control of their crypto wallets. These scams have affected a wide range of users, with even high-profile figures like Mark Cuban and Seth Green falling prey. The amounts stolen can be staggering, with some drainers reportedly siphoning off several million dollars from their victims. Recently, Chainalysis shared insights into details of Crypto Drainers.
随着加密货币市场的不断发展，恶意行为者窃取用户资金的策略也在不断发展。最新的威胁——加密货币消耗器——近年来越来越流行。与私钥盗窃和智能合约利用等更传统的方法相比，消耗器伪装成web3项目来欺骗受害者，让他们获得对加密钱包的控制权。这些骗局影响了广泛的用户，甚至马克·库班和塞斯·格林等知名人物也成为受害者。被盗金额可能令人震惊，据报道，一些诈骗者从受害者那里窃取了数百万美元。最近Chainaanalysis分享了对加密货币消耗器细节的见解。

Understanding How Crypto Drainers Operate
了解加密消耗器的运作方式

A crypto drainer is essentially a phishing tool designed for the web3 ecosystem. Instead of stealing usernames and passwords, the operators of these scams masquerade as legitimate web3 projects. They lure victims into connecting their crypto wallets to the drainer and approving transaction proposals, which effectively grant the scammers control of the funds in the victims' wallets. Following a successful attack, the drainers can instantly steal users' funds. The fraudulent web3 sites are often promoted in Discord communities and on compromised social media accounts.
货币消耗器本质上是一种专为web3生态系统设计的网络钓鱼工具。这些骗局的运营者不是窃取用户名和密码，而是伪装成合法的web3项目。他们引诱受害者将其加密钱包连接到消耗器并批准交易建议，这实际上使诈骗者能够控制受害者钱包中的资金。攻击成功后，消耗器可以立即窃取用户的资金。欺诈性web3网站经常在Discord社区和受损的社交媒体帐户上进行推广。

The Impact of Crypto Drainers on the Crypto Ecosystem
加密货币消耗器对加密生态系统的影响

While it is challenging to ascertain the total amount stolen by crypto drainers due to underreporting, the available data suggests that the scale of these scams is significant. In fact, the quarterly growth rate in value stolen by drainers has outpaced that of ransomware, another fast-growing category of cybercrime. After stealing digital assets, the criminals typically rely on various crypto services to launder the funds or convert them into cash. There has been a noticeable increase in funds sent by drainers to mixing services since 2021, while the funds sent to centralized exchanges have decreased. Some drainers are also using gambling services, albeit on a smaller scale.
虽然由于漏报而很难确定加密货币消耗器者窃取的总金额，但现有数据表明这些骗局的规模很大。事实上，消耗器窃取的价值的季度增长率已经超过了勒索软件（另一种快速增长的网络犯罪类别）。窃取数字资产后，犯罪分子通常依靠各种加密服务来洗钱或将其转换为现金。自2021年以来，消耗器发送到混合服务的资金明显增加，而发送到中心化交易所的资金却在减少。一些吸毒者也使用赌博服务，尽管规模较小。

Bitcoin's Encounter with Crypto Drainers
比特币与加密货币的相遇

While most drainers currently operate within the Ethereum ecosystem, an unusual drainer exploiting the Bitcoin blockchain has been identified. This drainer created a fake web page posing as Magic Eden, the primary NFT platform for Bitcoin Ordinals. As of April 2024, this drainer has allegedly stolen approximately $500,000 in over 1,000 malicious transactions. Despite Bitcoin not being as widely used for web3 services as other assets, several other Bitcoin drainers have already targeted the Ordinals trading community.
虽然大多数消耗器目前在以太坊生态系统中运行，但已经发现了一个利用比特币区块链的不寻常消耗器。 这个消耗器创建了一个假冒的网页，冒充Magic Eden，这是比特币Ordinals的主要NFT平台。截至2024年4月，该消耗器据称已通过1,000多笔恶意交易窃取了约50万美元。尽管比特币不像其他资产那样广泛用于web3服务，但其他几个比特币消耗器已经瞄准了Ordinals交易社区。

Preventing Crypto Drainer Attacks
防止加密货币消耗器攻击

As the operators of crypto drainers become increasingly sophisticated, it is crucial for web3 projects and users to implement various security measures to guard against these scams. Web3 security extensions such as Wallet Guard can identify phishing pages and websites, and assess security risks associated with cryptocurrency wallets. Users can also reduce their exposure to drainers by using an offline wallet to store valuable or large volumes of assets, only transferring funds to a hot wallet when necessary. In addition, they should be wary of links promoted in chat rooms or on social media, which may not be associated with a project's official account. If a user needs to connect to an unfamiliar web3 site, they can create a temporary wallet that doesn't contain any assets and connect it to the site. If a victim's assets are stolen by a drainer, they can cancel incomplete transactions.
随着加密货币消耗器的运营商变得越来越复杂，对于web3项目和用户来说，实施各种安全措施来防范这些诈骗至关重要。Wallet Guard等Web3安全扩展可以识别网络钓鱼页面和网站，并评估与加密货币钱包相关的安全风险。用户还可以通过使用离线钱包存储有价值或大量的资产，仅在必要时将资金转移到热钱包来减少对消耗器的暴露。此外，他们应该警惕聊天室或社交媒体上推广的链接，这些链接可能与项目的官方帐户无关。如果用户需要连接到一个不熟悉的web3站点，他们可以创建一个不包含任何资产的临时钱包并将其连接到该站点。 如果受害者的资产被消耗器窃取，他们可以取消不完整的交易。