Step Drainer attack has spread to 10 websites including StonkFun and Pickle Finance

According to SolanaFloor monitoring, the Step Drainer attack has been found on another 10 websites, including stonkfun.xyz, pickle.finance, echelon.market, origami.finance, fluxbeam.xyz, stakepoint.app, supswap.xyz, longbow.cash, shprd.finance, and apexdefi.xyz. SolanaFloor stated that it is actively investigating and collecting more data.

In addition, StonkFun reported that its website has been restored after migrating to new infrastructure, and on-chain operations were not affected, with no known users impacted.

It is reported that the Step Drainer attack is a highly active malware-as-a-service (MaaS) wallet theft tool in the Web3 and cryptocurrency space.