StepDrainer MaaS Platform Targeting Multi-Chain Crypto Wallets and NFT Assets

StepDrainer is a Malware-as-a-Service (MaaS) platform engineered to steal digital assets from cryptocurrency wallets, including fungible tokens and high-value NFT collections. The malware supports more than 20 blockchain networks and incorporates multiple draining techniques, particularly abusing ERC-20 token permissions and NFT approval mechanisms. The platform includes automated asset transfer capabilities, compatibility with widely used mobile wallets, and encrypted logging via Telegram channels for attacker monitoring. StepDrainer is commercially distributed within cybercriminal ecosystems, with pricing models ranging from approximately $750 for full source code access to $150 for a shared version that imposes a 20% commission on successful thefts.

• The Stealer Factory: Unpacking a Python-Based MaaS Infostealer BuilderCampaign2026-09-28
• Uncovering a SectopRAT Variant Embedded in Legitimate SoftwareMalware2026-09-25
• This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next MoveMalware2026-09-23
• Inside "MR ROBOT" - Anatomy of a Malware-as-a-Service Operation Targeting Indian Bank CustomersMalware2026-10-28
• September 2026 Infostealer Trend ReportMalware2026-10-28