User loses about 550,000 USDC after clicking sponsored Google ad for fake Hyperliquid site

A user lost about 550,000 USDC after clicking a sponsored Google ad that led to a fake Hyperliquid website, according to Odaily. The case involved professional theft infrastructure tied to the Inferno ecosystem, showing how phishing operations are being packaged as a service rather than run as one-off scams. Odaily said the related operation solicited customers through Telegram accounts and offered a toolkit that included malicious scripts, automated fund theft, cross-chain withdrawals, and automatic revenue splitting. In this case, the phishing group handled the ad purchase, deployed the spoofed website entry point, and supplied the final receiving address. Once the theft succeeded, the backend system automatically split the stolen funds. The report points to a more industrialized setup in which different roles in a phishing attack — traffic acquisition, fake site deployment, wallet draining, fund routing, and proceeds distribution — are handled through specialized infrastructure.