Cryptocurrency wallet draining
Named by 2 kept items in this workspace.
Search every workspace for Cryptocurrency wallet draining. It matches the name as written, so it can find other things that share it.
The items that name it 2
The app drains wallets after users import their private keys; the trading interface is suspected to be served remotely, though Iris has not observed the draining screen
Malware identifies cryptocurrency wallet addresses, queries blockchain balances, and transfers a percentage (DRAIN_PCT) or all funds to attacker-controlled wallets, with separate subroutines for Bitcoin/Litecoin/Dogecoin, Ethereum, and XRP
All techniques in this workspace.