Quark Drainer
Summary
Quark Drainer is a commercially distributed Drainer-as-a-Service (DaaS) toolkit operated under the brand Quark Lab. First advertised on cybercrime forums in late 2023, it supports wallet draining across more than 70 blockchains and 480 wallets — including EVM chains, Solana, TON, TRON, and XRP — and is sold for a flat fee of $5,000 with no ongoing revenue-share commission to operators. Security researchers at Blockaid identified Quark Lab as the most prolific drainer operation observed in their 2025–2026 tracking dataset. No law enforcement action or OFAC designation against the operators has been publicly confirmed as of August 2026.
Connected Entities
1 entities · 10 linked investigationsTimeline(6 events)
2023-11-02
Earliest confirmed forum advertisement for Quark Drainer appears on ewebdiscussion.com, listing $5,000 pricing, EVM chain support, and Seaport/Permit2 capabilities. A $4,000 holiday discount was promoted for November 15, 2023.
ewebdiscussion.com forum post2024-04-01
Intel 471 documents Quark Lab actor offering a combined Malware-as-a-Service package including the drainer and a cross-platform infostealer (Quark Stealer) targeting macOS, priced at $3,000/month for the infostealer component.
Intel 471 blog — macOS Is Increasingly Targeted by Threat Actors2025-01-01
KELA Cyber reports underground market chatter for macOS infostealers, including Quark Stealer, peaked in 2025. The broader wallet drainer market recorded $84 million in losses for the full year — an 83% decline from 2024 — while Quark Lab continued active operations.
KELA Cyber — The Rise of macOS Infostealers: 2025 in Review; CryptoNews2025-10-01
Security Alliance publishes State of Drainers Vol. 1, documenting the broader drainer ecosystem including operators such as Inferno, Rublevka, Eleven, and Vanilla. Quark Lab is tracked as active during this period by Blockaid.
Security Alliance — State of Drainers Vol. 12026-01-01
Blockaid publishes findings identifying Quark Lab as the most prolific drainer operation in its tracking dataset, noting support for 70+ blockchains and 480 wallets. Airdrop phishing templates targeting new chain launches are specifically called out.
Blockaid Blog — How Wallet Drainers Exploit New Blockchain Launches2026-07-09
Updated Quark Drainer advertisement posted on crdweb.cc advertising support for 440+ wallets, 90+ networks, EVM, Solana, TON, TRON, XRP; 400+ landing pages; and a private community of 200+ users. Price remains $5,000.
crdweb.cc carding forum advertisementDecision Log
- #1publish⛓ pending8/4/2026, 12:35:48 PMhash: GxZcrLcZ8eArNRdRiCRd7ch3VHFhrLmZNmUgoCQEptMG
13 of 19 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 8/4/2026, 12:35:39 PM
last updated: 8/4/2026, 8:32:36 PM
avoid.net — verified advice for a post-truth world