网络钓鱼骗子在 9 月份的攻击中窃取 2400 万美元后，突然向受害者返还 930 万美元

Scam Sniffer 于 7 月 13 日首次注意到，诈骗者使用 Dai (DAI) 1.00 美元的稳定币在上周的两笔交易中退回了资金。

A phishing scammer has returned nearly $9.3 million to a victim after stealing $24 million from them in a phishing attack last September.

一名网络钓鱼诈骗者在去年 9 月的一次网络钓鱼攻击中窃取了受害者 2400 万美元的资金后，已向受害者返还了近 930 万美元。

Noticed by Scam Sniffer on July 13, the scammer used Dai (DAI) stablecoin to return the funds across two transactions last week.

Scam Sniffer 于 7 月 13 日注意到，诈骗者使用 Dai (DAI) 稳定币在上周的两笔交易中退回了资金。

The first transfer saw $5.23 million returned on July 8, while another $4.04 million was sent on July 13 at 12:06 pm UTC, Etherscan data shows.

Etherscan 数据显示，第一笔转账于 7 月 8 日返还 523 万美元，另外 404 万美元于 UTC 时间 7 月 13 日中午 12:06 发送。

The victim fell for a $24.2 million phishing scam on Sept. 6, 2023, losing 9,579 Lido Staked Ether (stETH) and 4,850 Rocket Pool (rETH) tokens.

2023 年 9 月 6 日，受害者陷入价值 2420 万美元的网络钓鱼诈骗，损失了 9,579 个 Lido Staked Ether (stETH) 和 4,850 个 Rocket Pool (rETH) 代币。

The victim enabled token approvals to the scammer by signing “Increase Allowance” transactions, Scam Sniffer noted at the time of the incident. Allowance is an ERC-20 token feature that enables a third party to have the right to spend tokens belonging to that owner.

Scam Sniffer 在事件发生时指出，受害者通过签署“增加津贴”交易来向诈骗者启用代币批准。津贴是一项 ERC-20 代币功能，使第三方有权花费属于该所有者的代币。

Crypto market data platform CoinMarketCap and other industry players have flagged the loophole, noting that it can potentially allow anonymous developers to deploy malicious smart contracts to scam users.

加密市场数据平台 CoinMarketCap 和其他行业参与者已经指出了该漏洞，并指出它可能允许匿名开发人员部署恶意智能合约来欺骗用户。

The recent $9.3 million return equates to a 38.4% fund return at Sept. 6 prices, though the 14,429 in staked-Ether would have been worth $47.5 million at today’s prices.

以 9 月 6 日的价格计算，最近的 930 万美元回报相当于 38.4% 的基金回报，尽管以今天的价格计算，质押的 14,429 枚以太币价值为 4750 万美元。

Onchain data shows the Dai came through an address labeled as Railgun Relay — an intermediary for the privacy protocol — shortly before being transferred to the victim.

链上数据显示，Dai 在被转移给受害者之前不久就通过了一个标记为 Railgun Relay（隐私协议中介）的地址。

Scam Sniffer pointed Cointelegraph to an onchain message of the hacker reaching out to the victim via a different wallet address on July 6.

Scam Sniffer 向 Cointelegraph 指出，7 月 6 日，黑客通过另一个钱包地址向受害者发送了一条链上消息。

"Hello, I am the guy who took your money," he said. "I want to give the moneyback."

“你好，我是拿了你钱的人，”他说。 “我想把钱还给你。”

Etherscan data shows that the scammer’s wallet address now has a little over $3 million in funds after the $9 million transfer.

Etherscan 数据显示，在转账 900 万美元后，诈骗者的钱包地址现在拥有略高于 300 万美元的资金。

Nearly 99% of those funds comprise the METAGALAXY LAND (MEGALAND) token from the BNB Chain.

其中近 99% 的资金由 BNB 链上的 METAGALAXY LAND (MEGALAND) 代币组成。

Phishing scammers stole almost $300 million worth of crypto from 324,000 victims in 2023, Scam Sniffer’s 2023 Wallet Drainers Report revealed.

Scam Sniffer 的 2023 年钱包流失者报告显示，网络钓鱼诈骗者在 2023 年从 324,000 名受害者那里窃取了价值近 3 亿美元的加密货币。

In 2023, Inferno Drainer and MS Drainer were the two most notorious phishing scammers, stealing $81 million and $59 million, respectively.

2023 年，Inferno Drainer 和 MS Drainer 是两个最臭名昭著的网络钓鱼诈骗者，分别窃取了 8100 万美元和 5900 万美元。

Pink Drainer became one of the most prominent phishing scammers this year, stealing over $85 million before it shut down in May.

Pink Drainer 成为今年最著名的网络钓鱼诈骗者之一，在 5 月份关闭之前窃取了超过 8500 万美元。