Two wallet drainer cases worth $1.76M and $277K appear to be linked to the same attacker, according to @web3_antivirus. In both cases, funds were split across the same 3 addresses and routed through NEAR Intents into ETH. The second victim and the attacker behind both cases appear to be @MetaMask users.