Crypto mixer
A service that pools cryptocurrency from many senders and pays out from the pool, so that the link between an incoming and an outgoing transaction is broken. Charged as a percentage, sometimes with a delay bought separately.
Why it matters to you
For a defender the mixer is usually the end of the trail, not a step in it. Effort spent following funds past one is rarely repaid; effort spent on the addresses immediately before it, which are still attributable, often is.
Where we meet it
Mixing is advertised beside cashout rather than as a service in its own right, and the operators vouched for most are the ones who take a share of the proceeds. The reputation attaches to the payout, not to the privacy.
Connected terms
Cashout
The last mile: turning stolen access, cards or balances into money the criminal keeps. Gift cards, crypto, mule accounts, reshipping, each with its own fee and its own specialists.
Wallet file
The wallet database and key material an infostealer copies off a victim machine, sold on the chance that the passphrase is weak, reused, or sitting in the same log.
Drop
A money or goods mule: the recruited (sometimes unwitting) person whose bank account or address launders the proceeds. Recruited openly, in "work" channels, at scale.
Where this term stops being vocabulary
Malveine is where you watch it happen to you
Knowing the word is the cheap half. The platform is the half where the term arrives attached to your domain, with a timestamp and the source it came from.
More from the infrastructure
Antidetect browser
A browser built to present a consistent, disposable fingerprint per profile: its own canvas, fonts, timezone and proxy. Sold so a stolen session can be replayed from a machine that looks like the victim's.
Bulletproof hosting
Hosting sold on the promise that abuse complaints go unanswered and legal requests go unread. Priced well above ordinary hosting, because that indifference is the entire product.
C2 panel
The web console an operator uses to run infected machines: victims listed, tasks queued, output collected. Sold with the malware, screenshotted in the advertisement, and often the most revealing artifact a crew produces.
Dedik
A compromised dedicated server or RDP host, rented out as anonymous infrastructure. The underground's cloud computing, billed to someone else.