The Great Convergence: When Traditional Malware Becomes a Crypto-Hunting Machine

LevelBlue SpiderLabs’ Cyber Threat Intelligence Team warns of a ‘progressive convergence’ in which traditional commodity malware and infostealer infrastructures are being repurposed to hunt digital assets: modern crypto drainers (e.g., StepDrainer) and malware like EtherRAT now include multi-network draining and blockchain-aware functionality, while attackers increasingly use on-chain smart contracts and blockchain data for configuration, routing, and automating stolen asset movement—making crypto draining a mainstream enterprise threat.