A phishing scheme impersonating Collab.Land is actively draining user wallets by converting connected wallets to nonce wallets and transferring funds away, distributed through a fake Telegram link on a compromised third-party bounty page.