May 1, 2026
0 new drains, 1 update.
Updated
-
Critical✕Still active
Report: Inferno/AngelFerno drainer still active in 2026, bought Purple Drainer in March
A Ransom-ISAC report published on 5 October 2026 says the Inferno drainer ecosystem, now branded AngelFerno after merging with Angel Drainer, was still running in summer 2026 with thousands of affiliates. It says AngelFerno announced it had bought Purple Drainer in March 2026, that its factory has deployed over 17,000 single-use drainer contracts, and that it targets 165 tokens on 11 EVM chains (with Solana, TRON, SUI and XRP variants). The report ties it to domain takeovers including CoW Protocol in April 2026 (about $1.2M lost) and notes a May 2026 key rotation that locked the operators out of their own command contract for about 23 days.
Web3 users targeted by Inferno/AngelFerno affiliate phishing sites and domain takeovers·Multiple EVM chains·Since Mar 1, 2026·