前 Fortnite 职业玩家 Serpent 如何劫持 9 个 Twitter 和 Instagram 帐户，通过 Meme Coin 诈骗窃取 350 万美元，并在在线赌场赌光

Serpent（SerpentAU）是来自澳大利亚的前《堡垒之夜》职业选手，于 2020 年 6 月被电子竞技组织“Overtime”释放

Over the past few months, I have been tracking a series of related leak incidents. These incidents involved over nine accounts on Instagram and X, including those belonging to McDonald's, Kabosu's owner, Usher, Andy Ayrey, Wiz Khalifa, SPX 6900, and others, and resulted in approximately $3.5 million being stolen through the release of the Pump Funmeme coin.

在过去的几个月里，我一直在追踪一系列相关的泄密事件。这些事件涉及 Instagram 和 X 上的 9 个以上账户，其中包括属于麦当劳、Kabosu 所有者、Usher、Andy Ayrey、Wiz Khalifa、SPX 6900 等的账户，并导致通过 Pump Funmeme 代币的发行而被盗的约 350 万美元。

On August 21, 2024, the Instagram account of McDonald's was hacked, and a post promoting the bundled meme coin GRIMACE was published, after which the hacker began to spoof. From this pump and dump, over $690,000 was funneled into two wallets.

2024 年 8 月 21 日，麦当劳 Instagram 账户被黑客攻击，发布了宣传捆绑模因币 GRIMACE 的帖子，之后黑客开始恶搞。通过这次拉高和抛售，超过 69 万美元流入了两个钱包。

4RiNhTwBxYWgb4MSCtt9vXgVk2yuPhoQR3DR9pMVPU1W

4RiNhTwBxYWgb4MSCtt9vXgVk2yuPhoQR3DR9pMVPU1W

2vjnmxwTYNJvTmFhtqxZkPiuCHkaKZK5rcxTLuoC2dPB

2vjnmxwTYNJvTmFhtqxZkPiuCHkaKZK5rcxTLuoC2dPB

On September 3, 2024, the McDonald's attacker transferred 101.5 SOL to two addresses after the X account of actor Dean Norris was hacked, and these two addresses deployed and targeted the SCHRADER.

2024 年 9 月 3 日，麦当劳攻击者在演员 Dean Norris 的 X 账户被黑客攻击后，将 101.5 SOL 转移到两个地址，这两个地址部署并针对 SCHRADER。

4s9Uz9pTBXcEaEtcjs8eg98r2TVte3rq3JUm3rVTFMudfewGbNKmqNyYs9bSAMDUaTbTcuA1v39sWr7GRqkDJ6EM

4s9Uz9pTBXcEaEtcjs8eg98r2TVte3rq3JUm3rVTFMudfewGbNKmqNyYs9bSAMDUaTbTcuA1v39sWr7GRqkDJ6EM

1gxo1pjTqjbee7rHW4cGvuNffX1qP4F8fP17g6SSC5EYbQrnktDrKSFB1uh4ju7PxQjprWFin37WUsAe225b9c6

1gxo1pjTqjbee7rHW4cGvuNffX1qP4F8fP17g6SSC5EYbQrnktDrKSFB1uh4ju7PxQjprWFin37WUsAe225b9c6

On September 6, 2024, the funds obtained from the McDonald's APT (Account Takeover) were transferred to a casino deposit address.

2024年9月6日，从麦当劳APT（账户接管）获得的资金被转入赌场存款地址。

CuNzegC9DE4CxCMn31ZcYLvtDaYsLD9RX8eRvmtZQrnB

昆泽格C9DE4CxCMn31ZcYLvtDaysLD9RX8eRvmtZQrnB

By conducting a time analysis, follow-up withdrawals shortly after the deposits can be identified.

通过进行时间分析，可以识别存款后不久的后续提款。

B2fwZt5nTbdrnJ2CPsgrYMPuB4UnhN82EAM34dXDARLh

B2fwZt5nTbdrnJ2CPsgrYMPuB4UnhN82EAM34dXDARLh

On September 12, 2024, B2fw transferred 110 SOL to two addresses that participated in the meme coin rush promoted during the Usher leak incident.

2024 年 9 月 12 日，B2fw 将 110 SOL 转移到参与 Usher 泄露事件期间推广的 meme 代币热潮的两个地址。

4FUrwoHz1fuUf4eR6YEAYSG9d9rN5fzbowMXtbjwJAhTDtHXjpnTb1sz6aeF6T79JaiMFyT2xX2EuTxqT5UhFfKD

4FUrwoHz1fuUf4eR6YEAYSG9d9rN5fzbowMXtbjwJAhTDtHXjpnTb1sz6aeF6T79JaiMFyT2xX2EuTxqT5UhFfKD

427zpHF1WWgYgKxcSiUzwXLg2UqsF6xq7K13PU3mh6Wr99mipiVA6GcDTwi7EY93RJeRuEUDZAK9BnoMeki7sU6C

427zpHF1WWgYgKxcSiUzwXLg2UqsF6xq7K13PU3mh6Wr99mipiVA6GcDTwi7EY93RJeRuEUDZAK9BnoMeki7sU6C

Subsequently, B2fw transferred 4868 SOL to the casino deposit address ECb5v, which is also directly related to other APT (Account Takeover) incidents, including the leaks of Andy Ayrey and the Enoshima Aquarium.

随后，B2fw 将 4868 SOL 转入赌场充值地址 ECb5v，这也与其他 APT（账户接管）事件有直接关系，包括安迪·艾雷和江之岛水族馆的泄密事件。

Ecb5vsomUG3MEnLCgiFvkdnnqpggTEXtN17z62iDPuU3

Ecb5vsomUG3MEnLCgiFvkdnnqpggTEXtN17z62iDPuU3

On October 15, 2024, the X account of the Enoshima Aquarium was hacked and promoted a bundled meme coin. On that day, 84 SOL obtained from the scam were transferred to ECb5v.

2024 年 10 月 15 日，江之岛水族馆的 X 账户遭到黑客攻击，并推广捆绑模因币。当天，从骗局中获得的 84 SOL 被转入 ECb5v。

5PDjh74JTLMPW4dXr6fKm3Yue2j3vhbxLSK5dPbQ3oEGK4axE7fua1ngBMas4xpRY6dBr92Ccps7b1WwcLdnxXWL

5PDjh74JTLMPW4dXr6fKm3Yue2j3vhbxLSK5dPbQ3oEGK4axE7fua1ngBMas4xpRY6dBr92Ccps7b1WwcLdnxXWL

On October 29, 2024, the X account of Andy Ayrey (founder of Truth Terminal) was hacked for several days and promoted 6 meme coin scams. 3GVUs was one of the addresses involved in the token rush.

2024 年 10 月 29 日，Andy Ayrey（Truth Terminal 创始人）的 X 账户连续几天遭到黑客攻击，并推广了 6 个 meme 币诈骗。 3GVUs 是参与代币热潮的地址之一。

3GVUs2gNr161ohqnVXjUeoNQmf3cELxKSiPrxyQu6pjd

3GVUs2gNr161ohqnVXjUeoNQmf3cELxKSiPrxyQu6pjd

On October 30, 2024, 3GVUs transferred 169 SOL to Ecb5vs.

2024 年 10 月 30 日，3GVU 将 169 SOL 转让给 Ecb5vs。

67nwsLLE3aGua4VeH8p6qHc3SL3rpxi9omMxRnfpeyZVsBpZawnUHo4Pt4tdT5Vxny2uRNRDH3vSZ1fzvKkNCML4

67nwsLLE3aGua4VeH8p6qHc3SL3rpxi9omMxRnfpeyZVsBpZawnUHo4Pt4tdT5Vxny2uRNRDH3vSZ1fzvKkNCML4