A Malicious Script in Google and X Took Over 63k Users’ Cryptocurrency for $58 Million

Published on:

Last Updated on December 21, 2023 by Bitfinsider

Scam Sniffer claims that over the course of nine months, the malicious script took about $59 million in digital assets from over 63,000 victims. 10,072 websites have been linked to Wallet Drainers in the last nine months, with May, June, and November seeing the highest activity.

The majority of the ads discussed NFT airdrops and cryptocurrencies. Furthermore, a few of them contained allusions to well-known blockchain initiatives, such Ordinals Dogecoin (DOGE). The review procedure was made more difficult by malicious advertisements that avoided ad audits by using page-switching and regional targeting. Nine of the ads in the feed that tested X’s ad were phishing attempts, and more over 60% of them used this wallet drainer.

Popular cryptocurrency hardware wallet maker Ledger alerted its users earlier this month to the risks associated with utilizing dapps. The cause was an attack on the supply chain that was found.

Web3 applications are able to communicate with Ledger wallets thanks to the injection of malicious javascript code into the Ledger dapp Connect Kit library by attackers. Cryptocurrency and NFTs were automatically taken from service-connected accounts by this code.

Attacker activity is starting to pick up, according to Chainalysis, where hackers stole $1 billion worth of cryptocurrencies between May 2021 and December 2023. Analysts found that at least 1,013 addresses were used in targeted phishing in the beginning. Phishing is the term for a scam in which the perpetrator requests that you click on a link or sign into your account via emails or SMS messages.


Hardware wallets are safe and secure devices that can be used offline. They keep your cryptocurrency offline, making it impossible for you to be hacked. To find out more on the leading hardware wallets, you may view our reviews here: Ledger & Trezor
Disclaimer: The views and opinions expressed by the author, or any people mentioned in this article, are for informational purposes only, and they do not constitute financial, investment, legal, tax or other advice. Investing in or trading cryptocurrency or stocks comes with a risk of financial loss.

Related