Blockchain investigation agency Darkbit has uncovered a new scam service, Vanilla Drainer, which has stolen at least $5.27 million in cryptocurrency over a three-week period. Operating since October 2024, Vanilla Drainer assists fraudsters by providing phishing software and takes a 15%-20% commission. The service is known for bypassing the security detection platform Blockaid. On August 5th, the largest single theft saw victims lose $3.09 million in stablecoins, with the operator profiting $463,000. Stolen funds are typically converted into ETH or DAI and funneled into a fee wallet currently holding $2.23 million. Vanilla Drainer evades detection by creating new contracts for each malicious site and frequently changing domain names.