Blockaid: StepDrainer toolkit used to attack websites including Kintsu and Flap, connecting wallets or triggering malicious pages

October 31 - Security firm Blockaid has issued a warning that its system detected an ongoing front-end attack associated with the StepDrainer toolkit, involving three websites: kintsu, flap, and stonkbrokers.

Blockaid stated that the affected websites have been implanted with malicious scripts, and users who click "Connect Wallet" may be redirected to a malicious asset transfer page. The firm advises users to temporarily refrain from using the aforementioned decentralized applications and says it is investigating the attack and gathering more information, with further updates to be announced.