The notorious crypto phishing toolkit Angel Drainer is back, this time with a new and improved version called AngelX which has already deployed hundreds of malicious apps, according to a new report from blockchain security firm Blockaid.
In a Sept. 4 statement shared with Cointelegraph, Blockaid said the new AngelX system had already deployed 300 malicious decentralized applications (DApps) designed to steal digital assets from crypto users.
Blockaid said one of the more worrying features of AngelX is its upgraded support for phishing apps targeting users on “newer, less mature blockchains,” including The Open Network (TON) and Tron network.
“[AngelX] perceive these chains as less equipped to defend against attacks, due to a lack of robust security tools and support,” said Blockaid.
Additionally, the firm noted that they had detected over 150 new scams powered by the AngelX system following its launch on Aug. 31.
Blockaid detected around 150 new scams from the AngelX system. Source: Blockaid
Blockaid said the new AngelX system had an extremely high “evasion rate,” meaning that many of its malicious apps were able to go undetected by other security vendors in the crypto space.
Related: Inferno Drainer usage triples as crypto scams soar in 2024
The AngelX system also features an upgraded UX and control panel, allowing scammers to more-easily create highly customizable scam apps on a wider range of blockchains.
AngelX features a cleaner UX and an upgraded control panel. Source: Blockaid
Blockaid said its early detection of the new AngelX system helped the firm safeguard around $400,000 in assets that could’ve been otherwise misappropriated in the first five days of its operation.
Angel Drainer was reported to have wound down the bulk of its operations on July 16 after its developers realized their identities may have been compromised.
Security analysts have estimated that around $25 million in crypto assets have been stolen by way of Angel Drainer-powered phishing scams.
Drainer toolkits are apps that allow phishing scammers to easily drain the wallets of crypto users by tricking them into accidentally making token approvals. In most cases, drainers are provided to scammers in exchange for a portion of the stolen loot the scammers acquire.
Magazine: AI may already use more power than Bitcoin — and it threatens Bitcoin mining