Cosine: Ledger codebase attacker linked to Angel Drainer

On December 15th, SlowMist founder Yu Xian posted on social media that the group that poisoned Ledger Connect Kit yesterday is related to Angel Drainer (at least using this phishing tool). Through feature analysis with Scam Sniffer, they discovered thousands of phishing websites and synchronized them to the MetaMask eth-phishing-detect repository.
In addition, Angel Drainer has also started using smart contracts to manage the access domain names of malicious JS files.