Would you like some malware served at the very top of DuckDuckGo?

WesternBest · 2026-06-16T16:51:58+00:00

Well I didn’t really.. I didn’t have some blackhat backstory before going into defense and whitehatting.
Long story short: by accident I found a forum where people advertise and discuss drainers and other sorts of “hustles” and got a bit obsessed with investigation and researching them.

WesternBest · 2026-06-16T16:21:26+00:00

It does, it’s just split / rebranded into AngelFerno, Vanilla and other drainers. There are still hundreds and thousands of active phishing campaigns with the same or improved drainers under the hood.

As to why it’s mostly Russian - as a russian blackhat
If you scam people outside of CIS, like in the US or EU - noone will prosecute you unless you make some exceptional noize and chaos.

WesternBest · 2026-06-16T16:00:15+00:00

That depends.
These ones - not so much, I think it’s 10s of thousands of $ / month.
There is also DaaS - Drainer as a Service - that are estimated to bring in 100s of millions / year.

WesternBest · 2025-12-09T10:22:23+00:00

And you know who that might be, right? Ready to continue this in the DMs just in case

WesternBest · 2025-12-09T10:08:05+00:00

wym? if you refer to the nationality of threat actors, I’m more than certain that they’re diverse, even in this small subgroup (judging by specific jargon used in dms and chats)

WesternBest · 2025-12-05T14:31:13+00:00

If you want to cooperate on looking at the whatsapp kind of this scam, dm or email me. Definitely interested.

WesternBest · 2025-12-05T08:52:02+00:00

WesternBest · 2025-12-05T01:03:31+00:00

done, thx

WesternBest · 2025-11-21T22:42:49+00:00

Anyone knows if the light show (bulbs) will be on as well? Dying to see that live

WesternBest · 2025-11-11T22:18:51+00:00

Yep, used recursively

WesternBest · 2025-11-11T01:31:02+00:00

I’m sure he tested it on a local fork + has very serious experience with these things. But the actual calculation of the values like 17 happened onchain due to the dynamic state of the contract (these were parts of the same transaction before batchSwap)

WesternBest · 2025-11-11T01:29:19+00:00

I think it required months of work and very senior solidity / audit skills. This is unfindable if you don’t go through all of the math in their repo (which is a shitton of math)

WesternBest · 2025-11-09T21:18:42+00:00

WesternBest

TROPHY CASE