< BACK TO NEWS
negativeSYS.SOURCE: The Hacker News2026-08-20T14:12:03+05:30

40 Malicious Firefox Extensions Exploit Web3 Ecosystem to Steal Cryptocurrency Wallet Credentials

A set of 40 malicious Firefox extensions were discovered impersonating Web3 products to steal cryptocurrency wallet credentials through phishing and credential-stealing techniques. The campaign, part of a larger 77-extension operation, uses shared infrastructure and deceptive tactics to exfiltrate private keys and recovery phrases via cloud services and C2 networks.

A set of 40 Mozilla Firefox extensions has been found to engage in cryptocurrency wallet theft by masquerading as OKX, Rabby Wallet, TronLink, and other Web3 products.

According to the Socket Threat Research team, the extensions are part of a broader set of 77 browser add-ons that share source code and infrastructure overlaps. The campaign, dubbed Offside Wallet Theft Factory, is believed to

Read original article

*** END OF TRANSMISSION ***