importantSYS.SOURCE: The Hacker News• 2026-10-08T15:16:32+05:30
16 Malicious Firefox Extensions Imitating Rabby and OKX Wallets Steal Cryptocurrency Recovery Phrases
Cybersecurity researchers identified 16 malicious Firefox extensions mimicking Rabby and OKX wallets to steal cryptocurrency recovery phrases and private keys by intercepting data during wallet imports. All extensions were removed by October 5, 2026, with users advised to create new wallets and enhance security measures.
Cybersecurity researchers have discovered a cluster of 16 malicious Mozilla Firefox extensions that are capable of stealing cryptocurrency wallet recovery phrases and private keys.
"The extensions masquerade as wallet portals, desktop utilities, and browser tools, but their code intercepts recovery phrases and private keys during wallet import flows and attempts to send those secrets to
*** END OF TRANSMISSION ***