3wRre6bqgqBFfNUbdTaUGQSJ4vWFnbwe6QiWJgqzHiu7 scam

A phishing scam involving cryptocurrency was reported on 7 September 2026. Active Solana wallet-drainer phishing campaign. The site zcat.distributions.live impersonates a $ZCAT token "tier distribution / rewards" page and tricks users into signing a transaction that invokes drainer program 3wRre6bqgqBFfNUbdTaUGQSJ4vWFnbwe6QiWJgqzHiu7, transferring their full token + SOL balance to two collection wallets on a fixed 75/25 split (operator DuqqUpq4b573MZpnN16eGb2L3onYcRPFu3vmymJXjM36, kit DUwvqkGNLKqy42UhmhJ2V2G4optDpMka4oKHUYhDxHd). The program's upgrade authority is 2XxegSqY92y6mAb7fpJBpArxQyxLYhp2DsrEubjYmfxR. Deception method: a Token-2022 mint (3dsRL8av1AkikjYKskuWpnQr7NmWMPmaDswoqfMyJWH7) whose on-chain name field is a fake "sign in with Solana" message padded with newlines, so wallets preview a harmless sign-in while the real instructions are pushed out of view. At least 11 wallets drained on 2026-09-06; campaign still active. One victim tx: 3ePkQCpcFkWf1PbAC2PiaiQX14uaT596waKym33MhLYquUkKPyZUWEJaWMwHn8BjAYTGqq5ubEv44jd5b6hULtNw Wallet addresses linked to this report: solana: 3wRre6bqgqBFfNUbdTaUGQSJ4vWFnbwe6QiWJgqzHiu7, DuqqUpq4b573MZpnN16eGb2L3onYcRPFu3vmymJXjM36, DUwvqkGNLKqy42UhmhJ2V2G4optDpMka4oKHUYhDxHd, 2XxegSqY92y6mAb7fpJBpArxQyxLYhp2DsrEubjYmfxR, 3dsRL8av1AkikjYKskuWpnQr7NmWMPmaDswoqfMyJWH7 Do not send money or cryptocurrency to anyone connected to this report. If you have already paid, contact your bank or exchange and report the incident to your national fraud authority.