Crypto drainer
A kit sold to fraudsters that empties a cryptocurrency wallet the moment its owner signs a transaction on a malicious site. The victim believes they are minting, claiming an airdrop or connecting to a service, and the signature they give away authorises transfer of everything.
Why it matters to you
The theft is authorised by the owner, which is what makes it final. There is no chargeback, no issuer to appeal to and no reversal. Defence lives entirely before the signature: what the wallet shows about what is being approved, and whether the person reads it.
Where we meet it
Drainers are rented rather than bought, with the operator taking a share of the proceeds. That model is why the same kit shows up behind campaigns with no other connection to each other.
Connected terms
Wallet file
The wallet database and key material an infostealer copies off a victim machine, sold on the chance that the passphrase is weak, reused, or sitting in the same log.
Malvertising
Buying advertising to deliver the lure: a paid result above the real one, pointing at a page that looks like the software the visitor searched for. Distribution with a budget and a targeting console.
Lookalike domain
A domain registered to be misread as someone else's: a swapped character, an extra hyphen, a different suffix. The cheapest piece of infrastructure in this economy and the one most often pointed at a brand.
Where this term stops being vocabulary
Dragnet is where you watch it happen to you
Knowing the word is the cheap half. The platform is the half where the term arrives attached to your domain, with a timestamp and the source it came from.
More from the goods
Bank log
Access to a compromised online banking account, sold with the balance quoted in the listing. Priced as a fraction of what it holds, because the buyer still has to get the money out.
BIN
The first six to eight digits of a payment card, identifying the issuing bank, the country and the card product. Not stolen data in itself, but the index the trade is organised around: cards are advertised, sorted and priced by BIN.
Card dump
The magnetic-stripe data read off a payment card, sold for cloning into a physical one. Distinct from card-not-present data, priced higher, and slowly becoming a legacy good as chip and contactless spread.
Combolist
A recycled email:password list compiled from old breaches and other people's logs, resold in bulk. The fast food of the credential economy: cheap, stale, everywhere.