A phishing campaign named 'Inferno Drainer' has stolen over $80 million in cryptocurrency from 137,000 victims in a year.

The campaign used 100 different cryptocurrency brands to trick users into linking their wallets to the attackers' infrastructure.

The attackers created fake webpages mimicking popular brands like Coinbase and WalletConnect, and promoted these through social media.

They used promises of free airdrops, NFT minting opportunities, and compensation for cybercriminal outages to lure victims.

The campaign operated on a 'drainer-as-a-service' model, allowing cybercriminals to rent the infrastructure and customize malware features.

Researchers warn this success may lead to a surge in similar attacks in 2024.

Cryptocurrency holders are advised to be cautious of sites offering free digital assets, while brands are encouraged to work with law enforcement and use cybersecurity solutions to counter threats.