Users have lost approximately $1.08 million after mistakenly signing malicious licenses, according to Scam Sniffer monitoring. A user had 12 Aave Ethereum LBTC (aEthLBTC) stolen after signing a fraudulent "permission" signature. The phishing group responsible swiftly converted the stolen assets into ETH and laundered them through Tornado Cash, as reported by SlowMist's Yu Xian. This group is not considered mainstream, highlighting the evolving tactics of cybercriminals in the crypto space.