As cited
Copy frozen at (site build).
threat intel
40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet Secrets
Researchers identified 40 malicious Firefox extensions impersonating legitimate Web3 wallet products including OKX, Rabby Wallet, and TronLink to steal cryptocurrency secrets. The extensions are part of a larger campaign of 77 browser add-ons with shared code and infrastructure, tracked as the Offside Wallet Theft Factory.
Why it matters: Firefox users and cryptocurrency holders need to audit installed extensions immediately; attackers are using trusted product names to distribute wallet-stealing malware at scale.
- Source published
- First seen by Cybersecurity Tracker