Water Labbu is a distinct threat actor identified for its parasitic approach to cryptocurrency theft, with observed activity dating back to June 2022. This group specializes in compromising existing decentralized application (DApp) scam websites established by other malicious actors. Instead of engaging in direct social engineering, Water Labbu injects its own malicious JavaScript into these compromised platforms, effectively double-scamming victims who are already interacting with fraudulent cryptocurrency schemes. This unique operational model sets them apart, allowing them to illicitly acquire cryptocurrency, primarily USD Tether (USDT), which is subsequently converted to Ethereum (ETH) and laundered through privacy services like Tornado Cash. The group operates solely under the name Water Labbu, and its activities were first publicly documented in October 2022 by Trend Micro.

Actores similares

blackwaterransomware · 11clearwateractor · 1MuddyWaterapt · 1muddywateractor · 1Water Gamayunapt · 0Water Saciapt · 0Water Barghestapt · 0Water Kuritaapt · 0SHADOW-WATER-063apt · 0Water Curupiraapt · 0