Emre Yumlu 
Software developed specifically for stealing cryptocurrencies is now accessible even to individuals with little technical knowledge. These malicious tools have adopted a “drainer-as-a-service” (DaaS) model, transforming into a software-as-a-service industry.
Drainer Software Available for Rent Starting at $100
Recent research shows that such tools can be rented for just 100 to 300 USDT. In the past, stealing crypto assets required a solid grasp of coding and cybersecurity, but today, detailed manuals and user-friendly interfaces make it much easier for bad actors to get involved.
These services are promoted through online forums and Telegram groups, where newcomers are trained by seasoned scammers. Many who previously engaged in classic phishing methods are now shifting toward the crypto drainer scene.
Drainer Developers Now Show Up at Tech Fairs
Some of the actors behind these tools are now presenting themselves like legitimate software companies. Shockingly, certain groups are bold enough to open booths at tech events, benefiting from weak enforcement in specific regions. In countries where cybercrime laws are selectively applied, criminal activities are often ignored as long as local citizens are not targeted.
It’s a long-standing fact in the cybersecurity field that several malware programs are programmed to deactivate if the device is located in Russia or former Soviet countries. This built-in protection ensures local users are not affected, reducing the risk of legal repercussions for the developers.
Telegram: The New Hub of Cybercrime
While these operations were previously limited to darknet forums, Telegram has become a popular choice for drainer communities. These groups are typically small, with around 100–200 members, and serve as recruitment grounds for developers. In some chats, job offers are posted requesting custom scripts to empty wallets on specific blockchains like Hedera.
Such announcements, usually in Russian, are quickly deleted—but not before reaching the right audience. The use of semi-open developer chats demonstrates how coordinated and targeted these underground activities have become.
Nearly Half a Billion in Losses in 2024
In 2024 alone, these drainer programs caused an estimated $494 million in losses—a 67% increase compared to the previous year. As interest in drainer tools continues to surge, so does the number of related resources on darknet forums, jumping from 55 in 2022 to 129 in 2024.
This explosive growth highlights the urgent need for stronger crypto security measures for both individuals and organizations.
You can also freely share your thoughts and comments about the topic in the comment section. Additionally, don’t forget to follow us on our Telegram, YouTube, and Twitter channels for the latest news and updates.