Home›Crypto›Market Structure›Malicious Firefox wallet extensions steal recovery phr…

Malicious Firefox wallet extensions steal recovery phrases via lookalikes

Security researchers say 40 extensions have been confirmed malicious, including ones impersonating OKX, Rabby, and TronLink to harvest recovery phrases.

Reported · Written up by our desk · Market Structure

Decrypt reports that dozens of fake Firefox wallet extensions have been linked to crypto-stealing malware.

According to the outlet, the malicious extensions impersonate well known wallet brands, including OKX, Rabby, and TronLink, with the goal of collecting users recovery phrases.

Decrypt says the malware works by harvesting recovery phrases from anyone who types them into the fake extension interface.

The report adds that 40 of the extensions have been confirmed malicious.

More like this

Sources