Azoundria: Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/turbobobogorillaphishinginfernodrainer.php}} {{Unattributed Sources}} Inferno DrainerGemini, Binance, Kraken customer with address 0x6435...1390 fell victim to a phishing website and lost a significant number of tokens including TURBO, BOBO, GORILLA, GROK, and SHRAP. There is limited information about what happened, or anything which was done about a re..."

2024-09-18T21:05:23Z

Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/turbobobogorillaphishinginfernodrainer.php}} {{Unattributed Sources}} thumb|Inferno DrainerGemini, Binance, Kraken customer with address 0x6435...1390 fell victim to a phishing website and lost a significant number of tokens including TURBO, BOBO, GORILLA, GROK, and SHRAP. There is limited information about what happened, or anything which was done about a re..."

New page

{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/turbobobogorillaphishinginfernodrainer.php}}
{{Unattributed Sources}}

[[File:Infernodrainer.jpg|thumb|Inferno Drainer]]Gemini, Binance, Kraken customer with address 0x6435...1390 fell victim to a phishing website and lost a significant number of tokens including TURBO, BOBO, GORILLA, GROK, and SHRAP. There is limited information about what happened, or anything which was done about a recovery.<ref name="chainaegistwitter-14546" /><ref name="chainaegisapp-14547" /><ref name="etherscan-14548" /><ref name="metasleuth-14549" /><ref name="immunebytes-14550" /><ref name="metasleuth-14551" /><ref name="dexcheck-14552" />

== About 0x6435...1390 ==
Gemini, Binance, Kraken customer. tokens including TURBO, BOBO, GORILLA, GROK, and SHRAP.

== The Reality ==
This sections is included if a case involved deception or information that was unknown at the time. Examples include:

* When the service was actually started (if different than the "official story").
* Who actually ran a service and their own personal history.
* How the service was structured behind the scenes. (For example, there was no "trading bot".)
* Details of what audits reported and how vulnerabilities were missed during auditing.

== What Happened ==
"Address 0x6435...1390 fallen victim to a phishing scheme, and lost ～$1.55M worth of tokens."
{| class="wikitable"
|+Key Event Timeline - TURBO BOBO GORILLA Phishing Inferno Drainer
!Date
!Event
!Description
|-
|June 1st, 2024 3:17:59 PM MDT
|Blockchain Transaction
|Blockchain transaction draining the wallet happens.
|-
|June 1st, 2024 9:40:00 PM MDT
|ChainAegis Tweet
|ChainAegis tweets about the loss.
|}

== Technical Details ==
"In suspicious fund transfer, the victim's tokens are transferred to the attacker-controlled account. The attack is usually launched through social engineering, e.g., asking users to click a link to claim some rewards or AirDrop tokens."

"In this transaction, the TURBO token of the user (0x6435b) was transferred to the attacker (0xfc4ea). Since the attacker's account (0xfc4ea) was involved in several phishing scam incidents, we believe the user (0x6435b) was deceived into signing the approval transaction."

== Total Amount Lost ==
"lost ～$1.55M worth of tokens."

The total amount lost has been estimated at $1,550,000 USD.

== Immediate Reactions ==
"Address 0x6435...1390 fallen victim to a phishing scheme, and lost ～$1.55M worth of tokens.

The phishing address points to #InfernoDrainer"

"In suspicious fund transfer, the victim's tokens are transferred to the attacker-controlled account. The attack is usually launched through social engineering, e.g., asking users to click a link to claim some rewards or AirDrop tokens."

"In this transaction, the TURBO token of the user (0x6435b) was transferred to the attacker (0xfc4ea). Since the attacker's account (0xfc4ea) was involved in several phishing scam incidents, we believe the user (0x6435b) was deceived into signing the approval transaction."

== Ultimate Outcome ==
What was the end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?

== Total Amount Recovered ==
There do not appear to have been any funds recovered in this case.

What funds were recovered? What funds were reimbursed for those affected users?

== Ongoing Developments ==
What parts of this case are still remaining to be concluded?
== Individual Prevention Policies ==
{{Prevention:Individuals:Placeholder}}

{{Prevention:Individuals:End}}

== Platform Prevention Policies ==
{{Prevention:Platforms:Placeholder}}

{{Prevention:Platforms:End}}

== Regulatory Prevention Policies ==
{{Prevention:Regulators:Placeholder}}

{{Prevention:Regulators:End}}

== References ==
<references><ref name="chainaegistwitter-14546">[https://twitter.com/ChainAegis/status/1797110911523778578 @ChainAegis Twitter] (Accessed Jul 3, 2024)</ref>

<ref name="chainaegisapp-14547">[https://app.chainaegis.com/result?type=eth&search=0x185e8dac0cf8cd0967227169ac3c1562ae4e8e2c0121e71041f0f4afad497591 ChainAegis] (Accessed Jul 3, 2024)</ref>

<ref name="etherscan-14548">[https://etherscan.io/tx/0x185e8dac0cf8cd0967227169ac3c1562ae4e8e2c0121e71041f0f4afad497591 Ethereum Transaction Hash (Txhash) Details | Etherscan] (Accessed Jul 3, 2024)</ref>

<ref name="metasleuth-14549">[https://metasleuth.io/result/eth/0x6435b50861c5895c82a0789c6f91b80561ec1390 https://metasleuth.io/result/eth/0x6435b50861c5895c82a0789c6f91b80561ec1390] (Accessed Jul 3, 2024)</ref>

<ref name="immunebytes-14550">[https://www.immunebytes.com/blog/list-of-crypto-phishing-attacks/ List of Crypto Phishing Attacks - ImmuneBytes] (Accessed Jul 3, 2024)</ref>

<ref name="metasleuth-14551">[https://metasleuth.io/report/d980a3f5a8870d74b6fd8facfbe5f08b https://metasleuth.io/report/d980a3f5a8870d74b6fd8facfbe5f08b] (Accessed Jul 3, 2024)</ref>

<ref name="dexcheck-14552">[https://dexcheck.ai/app/wallet-analyzer/0x6435b50861c5895c82a0789c6f91b80561ec1390 https://dexcheck.ai/app/wallet-analyzer/0x6435b50861c5895c82a0789c6f91b80561ec1390] (Accessed Jul 3, 2024)</ref></references>

TURBO BOBO GORILLA Phishing Inferno Drainer - Revision history