A phishing attack targeting Aave Ethereum LBTC (aEthLBTC) has resulted in a loss of approximately $1.08 million. The attackers exploited an offline permit authorization to steal 12 Bitcoin equivalents. The funds were swiftly converted to Ethereum and laundered through Tornado Cash. The phishing group, not previously known for major operations, used wallet addresses 0x1CCAF86F3C8C8f7dFCd5Ad37eBc498cdfEb38ff0 and 0x0385E38457feA1B25E8175837fBE67400E0FE9fD to facilitate the theft.