前 Fortnite 職業玩家 Serpent 如何劫持 9 個 Twitter 和 Instagram 帳戶，透過 Meme Coin 詐騙竊取 350 萬美元，並在線上賭場賭光

Serpent（SerpentAU）是來自澳洲的前《要塞英雄》職業選手，於 2020 年 6 月被電競組織「Overtime」釋放

Over the past few months, I have been tracking a series of related leak incidents. These incidents involved over nine accounts on Instagram and X, including those belonging to McDonald's, Kabosu's owner, Usher, Andy Ayrey, Wiz Khalifa, SPX 6900, and others, and resulted in approximately $3.5 million being stolen through the release of the Pump Funmeme coin.

在過去的幾個月裡，我一直在追蹤一系列相關的洩密事件。這些事件涉及Instagram 和X 上的9 個以上帳戶，其中包括屬於麥當勞、Kabosu 所有者、Usher、Andy Ayrey、Wiz Khalifa、SPX 6900 等的帳戶，並導致透過Pump Funmeme 代幣的發行而被盜的約350 萬美元。

On August 21, 2024, the Instagram account of McDonald's was hacked, and a post promoting the bundled meme coin GRIMACE was published, after which the hacker began to spoof. From this pump and dump, over $690,000 was funneled into two wallets.

2024 年 8 月 21 日，麥當勞 Instagram 帳號被駭客攻擊，發布了宣傳捆綁迷因幣 GRIMACE 的帖子，之後駭客開始惡搞。透過這次拉高拋售，超過 69 萬美元流入了兩個錢包。

4RiNhTwBxYWgb4MSCtt9vXgVk2yuPhoQR3DR9pMVPU1W

4RiNhTwBxYWgb4MSCtt9vXgVk2yuPhoQR3DR9pMVPU1W

2vjnmxwTYNJvTmFhtqxZkPiuCHkaKZK5rcxTLuoC2dPB

2vjnmxwTYNJvTmFhtqxZkPiuCHkaKZK5rcxTLuoC2dPB

On September 3, 2024, the McDonald's attacker transferred 101.5 SOL to two addresses after the X account of actor Dean Norris was hacked, and these two addresses deployed and targeted the SCHRADER.

2024 年 9 月 3 日，麥當勞攻擊者在演員 Dean Norris 的 X 帳戶被駭客攻擊後，將 101.5 SOL 轉移到兩個地址，這兩個地址部署並針對 SCHRADER。

4s9Uz9pTBXcEaEtcjs8eg98r2TVte3rq3JUm3rVTFMudfewGbNKmqNyYs9bSAMDUaTbTcuA1v39sWr7GRqkDJ6EM

4s9Uz9pTBXcEaEtcjs8eg98r2TVte3rq3JUm3rVTFMudfewGbNKmqNyYs9bSAMDUaTbTcuA1v39sWr7GRqkDJ6EM

1gxo1pjTqjbee7rHW4cGvuNffX1qP4F8fP17g6SSC5EYbQrnktDrKSFB1uh4ju7PxQjprWFin37WUsAe225b9c6

1gxo1pjTqjbee7rHW4cGvuNffX1qP4F8fP17g6SSC5EYbQrnktDrKSFB1uh4ju7PxQjprWFin37WUsAe225b9c6

On September 6, 2024, the funds obtained from the McDonald's APT (Account Takeover) were transferred to a casino deposit address.

2024年9月6日，從麥當勞APT（帳戶接管）獲得的資金轉入賭場存款地址。

CuNzegC9DE4CxCMn31ZcYLvtDaYsLD9RX8eRvmtZQrnB

昆澤格C9DE4CxCMn31ZcYLvtDaysLD9RX8eRvmtZQrnB

By conducting a time analysis, follow-up withdrawals shortly after the deposits can be identified.

透過進行時間分析，可以識別存款後不久的後續提款。

B2fwZt5nTbdrnJ2CPsgrYMPuB4UnhN82EAM34dXDARLh

B2fwZt5nTbdrnJ2CPsgrYMPuB4UnhN82EAM34dXDARLh

On September 12, 2024, B2fw transferred 110 SOL to two addresses that participated in the meme coin rush promoted during the Usher leak incident.

2024 年 9 月 12 日，B2fw 將 110 SOL 轉移到參與 Usher 洩漏事件期間推廣的 meme 代幣熱潮的兩個地址。

4FUrwoHz1fuUf4eR6YEAYSG9d9rN5fzbowMXtbjwJAhTDtHXjpnTb1sz6aeF6T79JaiMFyT2xX2EuTxqT5UhFfKD

4FUrwoHz1fuUf4eR6YEAYSG9d9rN5fzbowMXtbjwJAhTDtHXjpnTb1sz6aeF6T79JaiMFyT2xX2EuTxqT5UhFfKD

427zpHF1WWgYgKxcSiUzwXLg2UqsF6xq7K13PU3mh6Wr99mipiVA6GcDTwi7EY93RJeRuEUDZAK9BnoMeki7sU6C

427zpHF1WWgYgKxcSiUzwXLg2UqsF6xq7K13PU3mh6Wr99mipiVA6GcDTwi7EY93RJeRuEUDZAK9BnoMeki7sU6C

Subsequently, B2fw transferred 4868 SOL to the casino deposit address ECb5v, which is also directly related to other APT (Account Takeover) incidents, including the leaks of Andy Ayrey and the Enoshima Aquarium.

隨後，B2fw 將 4868 SOL 轉入賭場儲值地址 ECb5v，這也與其他 APT（帳戶接管）事件有直接關係，包括安迪·艾雷和江之島水族館的洩密事件。

Ecb5vsomUG3MEnLCgiFvkdnnqpggTEXtN17z62iDPuU3

Ecb5vsomUG3MEnLCgiFvkdnnqpggTEXtN17z62iDPuU3

On October 15, 2024, the X account of the Enoshima Aquarium was hacked and promoted a bundled meme coin. On that day, 84 SOL obtained from the scam were transferred to ECb5v.

2024 年 10 月 15 日，江之島水族館的 X 帳號遭到駭客攻擊，並推廣捆綁迷因幣。當天，從騙局中獲得的 84 SOL 被轉入 ECb5v。

5PDjh74JTLMPW4dXr6fKm3Yue2j3vhbxLSK5dPbQ3oEGK4axE7fua1ngBMas4xpRY6dBr92Ccps7b1WwcLdnxXWL

5PDjh74JTLMPW4dXr6fKm3Yue2j3vhbxLSK5dPbQ3oEGK4axE7fua1ngBMas4xpRY6dBr92Ccps7b1WwcLdnxXWL

On October 29, 2024, the X account of Andy Ayrey (founder of Truth Terminal) was hacked for several days and promoted 6 meme coin scams. 3GVUs was one of the addresses involved in the token rush.

2024 年 10 月 29 日，Andy Ayrey（Truth Terminal 創始人）的 X 帳號連續幾天遭到駭客攻擊，並推廣了 6 個 meme 幣詐騙。 3GVUs 是參與代幣熱潮的地址之一。

3GVUs2gNr161ohqnVXjUeoNQmf3cELxKSiPrxyQu6pjd

3GVUs2gNr161ohqnVXjUeoNQmf3cELxKSiPrxyQu6pjd

On October 30, 2024, 3GVUs transferred 169 SOL to Ecb5vs.

2024 年 10 月 30 日，3GVU 將 169 SOL 轉讓給 Ecb5vs。

67nwsLLE3aGua4VeH8p6qHc3SL3rpxi9omMxRnfpeyZVsBpZawnUHo4Pt4tdT5Vxny2uRNRDH3vSZ1fzvKkNCML4

67nwsLLE3aGua4VeH8p6qHc3SL3rpxi9omMxRnfpeyZVsBpZawnUHo4Pt4tdT5Vxny2uRNRDH3vSZ1fzvKkNCML4