Dark Web Informer :verified_paw: on Nostr: 🚨 Corium TRON wallet drainer source code advertised for $2,000 on a hacking forum ...
🚨 Corium TRON wallet drainer source code advertised for $2,000 on a hacking forum
The actor "f15" is selling what they describe as the source code for Corium Tron Drainer, a tool designed to steal TRX and TRON-based USDT from cryptocurrency wallets.
The listing claims support for Trust Wallet, TronLink, OKX Wallet, and other mobile and desktop wallets.
Features include automatic gas top-ups for wallets with insufficient TRX, deceptive transaction prompts, QR-code support, anti-detection measures, and a Telegram-connected admin panel.
The tool's advertised capabilities have not been independently verified.
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
Published at
2026-10-23 16:33:48 UTCEvent JSON
{
"id": "65f64c59169f268fd4e66103848e5ae363be36ffa253cfcf13a12eff7f9fa9d1",
"pubkey": "3602e3a41b34946d81c007fcf5ae0daae25997b4e04b107e82e56a090c0d9b81",
"created_at": 1792773228,
"kind": 1,
"tags": [
[
"imeta",
"url https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/491/186/107/649/815/original/c355eaa306fe32b5.png",
"m image/png",
"dim 1281x870",
"blurhash U6R:HHDk?cxwM}Dj4oD*00IUIUt74-t5xtxt"
],
[
"imeta",
"url https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/491/186/105/808/149/original/cd74032422918ff2.png",
"m image/png",
"dim 1281x870",
"blurhash U8SY{q?b~qM{j[ofxuofofoft7M{_3WBRjt7"
],
[
"proxy",
"https://infosec.exchange/users/DarkWebInformer/statuses/117491186300191717",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "🚨 Corium TRON wallet drainer source code advertised for $2,000 on a hacking forum\n\nThe actor \"f15\" is selling what they describe as the source code for Corium Tron Drainer, a tool designed to steal TRX and TRON-based USDT from cryptocurrency wallets.\n\nThe listing claims support for Trust Wallet, TronLink, OKX Wallet, and other mobile and desktop wallets.\n\nFeatures include automatic gas top-ups for wallets with insufficient TRX, deceptive transaction prompts, QR-code support, anti-detection measures, and a Telegram-connected admin panel.\n\nThe tool's advertised capabilities have not been independently verified.\n\n💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing\n\nhttps://media.infosec.exchange/infosec.exchange/media_attachments/files/117/491/186/107/649/815/original/c355eaa306fe32b5.png\nhttps://media.infosec.exchange/infosec.exchange/media_attachments/files/117/491/186/105/808/149/original/cd74032422918ff2.png",
"sig": "1669c8ddbaff90d5eddefe939beb2d2808d9eb760dcaf84f1ed434ccb92d4dadde610d8f521d11deba17bf558d46a7c23e6758fd28dda56eeb25b8ae34a8146f"
}
