Crypto theft campaign hits Firefox users with wallet clones

Over 40 fake Firefox extensions impersonating popular crypto wallets have been used in an ongoing campaign to steal users’ wallet credentials.

More than 40 fake extensions for the popular web browser Mozilla Firefox have been linked to an ongoing malware campaign to steal cryptocurrencies from users, according to a report published Wednesday by cybersecurity firm Koi Security.

The large-scale phishing operation reportedly deploys extensions impersonating wallet tools such as Coinbase, MetaMask, Trust Wallet, Phantom, Exodus, OKX, MyMonero, Bitget and others. Once installed, the malicious extensions are designed to steal users’ wallet credentials.

“So far, we were able to link to over 40 different extensions to this campaign, which is still ongoing and very much alive,” the company said.

Read more