Many Fake Crypto Bag Extension Found on Firefox

Many Fake Crypto Bag Extension Found on Firefox Use Exactly Lost Coin

According to a report by the website Decrypt, a research team from Socket, a supply chain attack specialist, detected extensions on up to 77 Firefox web browsers impersonating famous Cryptokerrency wallets such as OKX, Rabby Wallet, TronLink, and other Web3 applications using naming techniques similar but slightly different to genuine ones, which the research team detected through Shared Code, Infrastructure, and a download release ( Publishing Pattern) The campaign was detected from March to August (the time of publication) and some dangerous additions were still downloadable even after the research team reported them to Mozilla.

The complement details from the 77 detected are as follows:

Of the 40 that have been confirmed to be malware,

37 of them are disguised as applications such as Password Generator, Money Conversion Tool, and Note Maker, etc.

Nine of the 40 confirmed malware are disguised as sports apps such as football, basketball, and American football.

It was detected that an application disguised as an OKX wallet requested only two permissions to access the system: Storage Access and the Tab of the web browser to load a page to trick the victim into a Seed Phrase.

Half of the applications, fraudulent as wallet apps, trick the victim into importing the original blow through Seed Phrases.

The 13 were modified Rabby's wallet add-on, with all normal functions, but the data recorded in the wallet was secretly sent back to the hackers.

Five add-ons contain hidden passwords on the web browser and clipboard data.

# Trending # Lemon 8 Howtoo # lemon 8 diary # firefox # freedomhack