Scammers have stolen $3 million worth of cryptocurrencies on Christmas day as they continue to use Google Ads to advertise malicious fake websites that use wallet draining software – MS Drainer.

According to a recent report on Dec. 21, scammers used MS Drainer to steal $59 million worth of cryptocurrency in 2023. 

According to Scam Sniffer, the attackers used Google Ads to trick crypto users into accessing fake versions of Web3 websites, including Zapper, Lido, Stargate, DefiLlama, Orbiter Finance and Radient.

The security firm flagged fresh incidents from phishing sites associated with the same attackers’ addresses in their scam database on Dec. 25.

another victim lost $880k worth of aEthWBTC to phishing scams about 11 minutes ago. https://t.co/yMM9OSzRDI https://t.co/6n6m0lZQK4 pic.twitter.com/jsrEGTaVJ8

— Scam Sniffer | Web3 Anti-Scam (@realScamSniffer) December 26, 2023

Scam Sniffer confirmed that around $3 million was lost to phishing scams on Christmas Day. 

A mixture of WBTC, aPolUSDT, aUSDC and USDT was stolen in separate incidents according to screenshots shared by the company.

See Also: Beware! Fake Rabby Wallet Sneaks Into Apple’s App Store

A spokesperson from the company said that Google Ads security was informed of the ongoing promotion of fake sites and the use of wallet-draining software in April 2023. 

However, Scam Sniffer has not yet heard back from the platform.

The latest phishing thefts act as a reminder for cryptocurrency users to double-check the authenticity of websites and transactions that are being authorized by their Web3 wallets.

“Phishing scams are the top threat to the user now. To avoid them, as the user, the only thing we can do is verify each signature request carefully,” Scam Sniffer’s spokesperson said.

Scam Sniffer found 10,072 fake sites that used MS Drainer through 2023 in its recent report on using the wallet drainer. 

The software has been used to steal $58.98 million worth of crypto from over 63,000 victims, according to a Dune Analytics dashboard set up to track it.