StepDrainer Malware Tool Drains Millions from Crypto Wallets Across Multiple Networks

A malware tool called StepDrainer is causing widespread issues in the cryptocurrency space, with reports of it draining money from wallets across multiple networks.

According to cybersecurity researchers, StepDrainer operates as a malware-as-a-service kit that uses fake but realistic Web3 wallet pop-ups to trick people into approving transfers. These pop-ups are made to look like legitimate connections to Web3Modal wallets or other smart contract tools.

The tool misuses real smart contract tools like Seaport and Permit v2 to show wallet approval pop-ups with fake details, making it difficult for users to identify the malicious activity.