---
title: "Tech giant Google, X ads include crypto 'Drainer' malware used for crypto theft."  
description: "Cryptocurrency Scam Alert: Hackers Steal Nearly $59 Million Using \"MS Drainer\""  
author: "Saumya Mishra"  
published: 2023-12-27  
updated: 2023-12-27  
canonical: https://www.mindstick.com/news/3673/tech-giant-google-x-ads-include-crypto-drainer-malware-used-for-crypto-theft  
category: "technology"  
tags: ["google", "cryptocurrency"]  
reading_time: 2 minutes  

---

# Tech giant Google, X ads include crypto 'Drainer' malware used for crypto theft.

Hackers have devised a new scheme to steal cryptocurrency, draining nearly **$58.98 million** from 63,210 victims over the past nine months. This scam, dubbed "**MS Drainer**," utilizes fake versions of popular crypto sites and malicious ads to deceive users. Let's break down the key details of this [cyber heist](https://yourviews.mindstick.com/view/84335/how-to-prevent-cyber-crime-in-india):

- **Scam Scope:** $58.98 million stolen from 63,210 victims
- **Modus Operandi:** Fake crypto sites and Google/X ads
- **Target [Platforms](https://www.mindstick.com/articles/126146/the-current-scenario-of-cryptocurrency-exchange-platforms):** Zapper, Lido, Stargate, DefiLlama, Orbiter Finance, Radiant

MS Drainer operates by employing "**wallet drainers**," [blockchain](https://www.mindstick.com/articles/13044/blockchain-games-and-their-potential-influence-on-gaming) [technologies](https://www.mindstick.com/blog/11429/tools-and-technologies-to-learn-in-2017) that enable attackers to siphon [cryptocurrency](https://www.mindstick.com/blog/299473/is-cryptocurrency-a-good-investment) from unsuspecting victims without their knowledge. Scammers typically achieve this by manipulating the token [approval process](https://www.mindstick.com/forum/23080/windows-phone-app-approval-process).

The scheme first surfaced in March 2023, with security teams from **SlowMist and ZachXBT** contributing to its investigation. Further evidence emerged in June through the "**Ordinal Bubbles**" phishing scam linked to MS Drainer.

[Researchers](https://www.mindstick.com/news/1544/mars-looks-more-seismically-active-than-before-thought-said-researchers) discovered nine different [Google ads](https://www.mindstick.com/articles/116109/6-reasons-your-business-should-use-google-ads) promoting the [scam,](https://yourviews.mindstick.com/story/3510/type-of-online-scam-list) with **60%** directly linked to the drainer program. A staggering 10,072 fake websites utilizing MS Drainer were also uncovered.

Interestingly, the MS Drainer developer employed an atypical [marketing strategy](https://yourviews.mindstick.com/view/84669/why-you-should-know-the-marketing-strategy-of-mcdonald-s). Unlike most wallet drainers that take a percentage of stolen funds, MS Drainer was advertised on forums for a flat fee of **$1,499.99**. Additional "modules" offering advanced features were available for purchase at varying prices.

![Tech giant Google, X ads include crypto 'Drainer' malware used for crypto theft.](https://www.mindstick.com/usernews/655071/8f7cd468-0351-4120-8bac-012a600a00ef/images/e701be9c-6f04-43d3-b256-ea9ab282cbd3.jpg)

---

Original Source: https://www.mindstick.com/news/3673/tech-giant-google-x-ads-include-crypto-drainer-malware-used-for-crypto-theft

Copyright © MindStick Software Pvt. Ltd. This Markdown version is provided for developers, AI systems, and offline reading.