{"id":558417,"date":"2023-03-02T07:39:47","date_gmt":"2023-03-02T04:39:47","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/notorious-monkey-drainer-crypto-scammer-says-theyre-shutting-down\/"},"modified":"2023-03-02T07:39:47","modified_gmt":"2023-03-02T04:39:47","slug":"notorious-monkey-drainer-crypto-scammer-says-theyre-shutting-down","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/notorious-monkey-drainer-crypto-scammer-says-theyre-shutting-down\/","title":{"rendered":"# Notorious Monkey Drainer crypto scammer says they\u2019re \u2018shutting down\u2019"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_85 counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6a3a1c5ba5a4f\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #dd3333;color:#dd3333\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #dd3333;color:#dd3333\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\"  id=\"ez-toc-cssicon-toggle-item-6a3a1c5ba5a4f\" checked aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-1'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/buradabiliyorum.com\/en\/notorious-monkey-drainer-crypto-scammer-says-theyre-shutting-down\/#%E2%80%9D_Notorious_Monkey_Drainer_crypto_scammer_says_theyre_%E2%80%98shutting_down_%E2%80%9C\" >&#8221; Notorious Monkey Drainer crypto scammer says they\u2019re \u2018shutting down\u2019 &#8220;<\/a><\/li><\/ul><\/nav><\/div>\n<h1><span class=\"ez-toc-section\" id=\"%E2%80%9D_Notorious_Monkey_Drainer_crypto_scammer_says_theyre_%E2%80%98shutting_down_%E2%80%9C\"><\/span>&#8221; Notorious Monkey Drainer crypto scammer says they\u2019re \u2018shutting down\u2019 &#8220;<span class=\"ez-toc-section-end\"><\/span><\/h1>\n<div class=\"post-content\" data-v-48054ca8>The cryptocurrency phishing scammer behind some of the most high-profile and high-value Web3 thefts is claiming to have packed up shop and is \u201cmoving on to something better.\u201d<\/p>\n<p>The scammer by the pseudonym Monkey Drainer <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/t.me\/MonkeyDrainer\/317\">posted<\/a> to their Telegram channel on Mar. 1 that they \u201cwill be shutting down im<a href=\"https:\/\/buradabiliyorum.com\/en\/category\/social-mediaa\/\" data-internallinksmanager029f6b8e52c=\"1\" title=\"Social Media\" target=\"_blank\" rel=\"noopener\">media<\/a>tely\u201d and all \u201cfiles, servers and devices\u201d related to the drainer \u201cwill be destroyed immediately\u201d and it \u201cwill not return.\u201d<\/p>\n<figure><img decoding=\"async\" src=\"https:\/\/s3.cointelegraph.com\/uploads\/2023-03\/75bca9a5-39f1-40d3-a008-33d43d218a5a.png\"><figcaption style=\"text-align: center;\"><em>Monkey Drainer\u2019s full message posted to Telegram recommending an alternative service. Source: Telegram<\/em><\/figcaption><\/figure>\n<p>The scammer even gave advice to budding \u201cyoung cyber criminals\u201d saying they shouldn\u2019t \u201close themselves in the pursuit of easy money\u201d and only those \u201cwith the highest level of dedication\u201d should operate a \u201clarge scale cybercrime\u201d outfit.<\/p>\n<p>Monkey Drainer even recommended a \u201cflawless\u201d alternative service to the one they once offered named \u201cVenom Drainer\u201d and pointed to a Telegram account for the service that was created only a day before Monkey\u2019s announcement.<\/p>\n<p>Blockchain security firm PeckShield tweeted on Mar. 1 that Monkey Drainer scammer deposited around 200 Ether (ETH) worth $330,000 within the last day into the crypto mixing service Tornado Cash, attempting to obscure their funds. 840 ETH worth $1.4 million was still in their primary wallet.<\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\"><a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/hashtag\/PeckShieldAlert?src=hash&amp;ref_src=twsrc%5Etfw\">#PeckShieldAlert<\/a> Scammer <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/hashtag\/MonkeyDrainer?src=hash&amp;ref_src=twsrc%5Etfw\">#MonkeyDrainer<\/a>, who runs theft schemes for multiple clients (a sort of &#8216;scam-as-a-service&#8217;) announced to shut down their service<br \/>~200 <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/search?q=%24ETH&amp;src=ctag&amp;ref_src=twsrc%5Etfw\">$ETH<\/a> has been transferred to Tornado Cash within the last 24 hours, while ~840 <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/search?q=%24ETH&amp;src=ctag&amp;ref_src=twsrc%5Etfw\">$ETH<\/a> (~$1.4M) sits in their main address <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/t.co\/1lg3KLRxhk\">pic.twitter.com\/1lg3KLRxhk<\/a><\/p>\n<p>\u2014 PeckShieldAlert (@PeckShieldAlert) <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/PeckShieldAlert\/status\/1630844122520240129?ref_src=twsrc%5Etfw\">March 1, 2023<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>Blockchain security firm CertiK also shared Monkey\u2019s message on a Mar. 1 tweet, saying the crypto wallet-draining kit they offered is understood to take a 30% \u201ccommission\u201d of funds stolen funds from others&#8217; use of the software.<\/p>\n<p>Wallet-draining kits from other providers have copied the model, and CertiK pointed to other vendors already reporting an uptick in requests since Monkey Drainer announced the shutdown.<\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\">3\/ Wallet drainer vendors have noted the payment structure Monkey introduced and have since copied<\/p>\n<p>Below are a few examples that we\u2019ve seen: <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/t.co\/i62aU5t2pv\">pic.twitter.com\/i62aU5t2pv<\/a><\/p>\n<p>\u2014 CertiK Alert (@CertiKAlert) <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/CertiKAlert\/status\/1630630006589145104?ref_src=twsrc%5Etfw\">February 28, 2023<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>Monkey Drainer is understood to have\u00a0operated since late 2022 and is estimated to have stolen up to $13 million worth of cryptocurrencies and nonfungible tokens (NFTs) since that time. <\/p>\n<p><strong><em>Related: <\/em><\/strong><strong><em>Monkey Drainer-linked scammers possibly exposed after an on-chain quarrel<\/em><\/strong><\/p>\n<p>Other copycat phishing scammers and wallet-draining kits have stolen much more. A report from Web3 bug bounty platform Immunefi revealed $3.9 billion worth of crypto was lost to hacks, frauds, scams and rug pulls in 2022.<\/p>\n<p>Possibly one of the single most high-profile and high-value theft by a wallet drainer in recent times was the January attack on Kevin Rose, the co-founder of the Moonbirds NFT collection.<\/p>\n<p>Rose\u2019s wallet was drained after he <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/download-scripts-themes-apps\/\" data-internallinksmanager029f6b8e52c=\"9\" title=\"Download Scripts &amp; Themes &amp; Apps\" target=\"_blank\" rel=\"noopener\">app<\/a>roved a malicious signature on a phishing website that transferred over $1.1 million worth of his personal NFTs to the attacker.<\/p>\n<p><template data-name=\"subscription_form\" data-type=\"defi_newsletter\"><\/template><\/div>\n<blockquote><p><strong><span style=\"color: #ff6600;\">If you liked the article, do not forget to share it with your friends. Follow us on\u00a0<span style=\"color: #ff0000;\"><a style=\"color: #ff0000;\" href=\"https:\/\/news.google.com\/publications\/CAAqBwgKMLG0nwswvr63Aw\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">Google News<\/a><\/span>\u00a0too, click on the star and choose us from your favorites.<\/span><\/strong><\/p><\/blockquote>\n<blockquote>\n<p style=\"text-align: center;\">For forums sites go to <span style=\"color: #ff9900;\"><a style=\"color: #ff9900;\" href=\"https:\/\/forum.buradabiliyorum.com\/\" target=\"_blank\" rel=\"noopener\">Forum.BuradaBiliyorum.Com<\/a><\/span><\/strong>\n<\/p><\/blockquote>\n<blockquote>\n<p style=\"text-align: center;\"><strong>If you want to read more <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/news\/\" data-internallinksmanager029f6b8e52c=\"2\" title=\"News\" target=\"_blank\" rel=\"noopener\">News<\/a> articles, you can visit our <span style=\"color: #ff9900;\"><a style=\"color: #ff9900;\" href=\"https:\/\/en.buradabiliyorum.com\/general\/\" target=\"_blank\" rel=\"noopener\">General category.<\/a><\/span><\/strong><\/p>\n<\/blockquote>\n<p><span style=\"color: black;\"><a style=\"color: #ff9900;\" href=\"https:\/\/cointelegraph.com\/news\/notorious-monkey-drainer-crypto-scammer-says-they-re-shutting-down\" target=\"_blank\" rel=\"noopener\">Source<\/a><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>&#8221; Notorious Monkey Drainer crypto scammer says they\u2019re \u2018shutting down\u2019 &#8220; The cryptocurrency phishing scammer behind some of the most high-profile and high-value Web3 thefts is claiming to have packed up shop and is \u201cmoving on to something better.\u201d The scammer by the pseudonym Monkey Drainer posted to their Telegram channel on Mar. 1 that&#8230;<\/p>\n","protected":false},"author":1,"featured_media":558418,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/s3.cointelegraph.com\/uploads\/2023-03\/b0015a0e-8a74-490a-b802-9108797349ab.jpg","fifu_image_alt":"","footnotes":""},"categories":[1],"tags":[74868,74882,74879,70944,75134,71101],"class_list":["post-558417","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-general","tag-defi","tag-hacks","tag-wallet","tag-hackers","tag-phishing","tag-scams"],"_links":{"self":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/558417","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/comments?post=558417"}],"version-history":[{"count":0,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/558417\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media\/558418"}],"wp:attachment":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media?parent=558417"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/categories?post=558417"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/tags?post=558417"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}