The 12 DeFi websites hijacked through the Name.com DNS attack were injected with Step Drainer, a Malware-as-a-Service toolkit that compromised frontends to harvest unlimited token approvals and signatures across more than 20 blockchain networks

From the articleHackers hijack 12 DeFi websites registered with Name.com, draining about $138KAlso in LaunchOnSF restores website as StepDrainer attack spreads to 10 more sites, Hackers hijack a dozen DeFi websites, all registered with Name.com, and steal about $138,000