Architectural Concept Design Collection

  • CONTACT
  • MARKETCAP
  • BLOG
Finances Investing and Crypto News
  • BOOKMARKS
  • Finance
  • Investment
  • Crypto
    • Bitcoin
    • Blockchain
    • Ethereum
    • Forex
    • Tether
  • Market
    • Binance
    • Business
    • Investor
    • Money
    • Trading
  • News
    • Mining
    • NFT
    • Stocks
Reading: More than 40 fake wallet extensions on browsers detected as malware threat
Share
  • bitcoinBitcoin(BTC)$108,187.10
  • ethereumEthereum(ETH)$2,516.34
  • tetherTether USDt(USDT)$1.00
  • rippleXRP(XRP)$2.22
  • binancecoinBNB(BNB)$655.22
  • solanaSolana(SOL)$147.22
  • usd-coinUSDC(USDC)$1.00
  • tronTRON(TRX)$0.283480
  • dogecoinDogecoin(DOGE)$0.163839
  • cardanoCardano(ADA)$0.57
Finances Investing and Crypto NewsFinances Investing and Crypto News
0
Font ResizerAa
  • Finance
  • Investment
  • Crypto
  • Market
  • News
Search
  • Finance
  • Investment
  • Crypto
    • Bitcoin
    • Blockchain
    • Ethereum
    • Forex
    • Tether
  • Market
    • Binance
    • Business
    • Investor
    • Money
    • Trading
  • News
    • Mining
    • NFT
    • Stocks
Have an existing account? Sign In
Follow US
© Foxiz News Network. Ruby Design Company. All Rights Reserved.
Finances Investing and Crypto News > Blog > Crypto > Ethereum > More than 40 fake wallet extensions on browsers detected as malware threat
CryptoEthereum

More than 40 fake wallet extensions on browsers detected as malware threat

admin
Last updated: 03/07/2025 2:34 Chiều
admin
Published 03/07/2025
Share


Security firm Koi discovered over 40 fake wallet extensions have popped up on Firefox browser plug-in stores. They lure victims by masquerading as major wallet firms.

According to recent blogpost from the security company Koi, hackers have been operating a large-scale campaign involving dozens of fake crypto wallet extensions sold through the plug-in stores.

These fake wallets are designed to impersonate and even mirror mainstream digital wallet platforms, including Coinbase, MetaMask, OKX, Bitget, Ethereum (ETH) Wallet and many others. Once the extension is installed, the malicious software will be able to gain access to user wallets by stealing their login wallet information.

“So far, we were able to link to over 40 different extensions to this campaign, which is still ongoing and very much alive,” wrote the security firm in its notice.

The firm found that some of the fake extensions are still available for download on the browser marketplace. Koi estimated that the campaign itself is still “active, persistent and evolving,” with the last known activity occurring as recent as last week.

How do fake wallets steal user credentials?

The fake wallet extensions extract user credentials directly through the websites they target and transmit them to a remote server controlled by the hackers. They can also use this mode of infiltration to uncover a user’s external IP address, most likely to track or target their other devices.

When displayed on the browser plug-in marketplace, the fake wallet mirrors major wallet platforms almost to the very last detail; they use identical names and logos of the service they are impersonating so that they are able to gain the user’s trust.

To make the fake wallet seem believable to the average viewer, the hackers use a tactic that is called review inflation. many of the malicious extensions had hundreds of fake 5-star reviews, far exceeding their actual user base.

This tactic makes the fake wallet extension appear widely adopted and positively reviewed, as if it were the real thing.

In some cases, Koi found that malicious actors took advantage of the fact that the original extensions are open source. Therefore, they are able to clone codebases and slip in their own malicious code into it.

“This low-effort, high-impact approach allowed the actor to maintain expected user experience while reducing the chances of immediate detection,” wrote Koi.

However, users can look for signs that indicate the extension they intend to download is actually a fraud. These include the appearance of comments in the extension code written in Russian, and suspicious metadata found in the PDF file retrieved from a command server in the operation.

Users can stay safe from fake wallet attacks by only installing extensions from verified publishers and using an extension allow-list to restrict installation to pre-approved, validated plugins only.

Lately, hackers are getting more creative with ways to infiltrate crypto user wallets, ranging from fake job search sites to printer extensions. In fact, according to a NASAA survey, cryptocurrency and social media scams are considered a top threat to retail investors in 2025.

You Might Also Like

Ubyx raises $10M to build global stablecoin network as senate advances GENIUS Act

new highs likely if $101k breaks

Ethereum’s Pectra upgrade facing mounting exploit concerns

RedotPay taps Circle for crypto-to-fiat transfers, launches in Brazil

Parataxis seals $18m deal to launch Bitcoin treasury on KOSDAQ

TAGGED:browsersdetectedextensionsfakemalwarethreatwallet

Sign Up For Daily Newsletter

Be keep up! Get the latest breaking news delivered straight to your inbox.
By signing up, you agree to our Terms of Use and acknowledge the data practices in our Privacy Policy. You may unsubscribe at any time.
Share This Article
Facebook Email Copy Link Print
Previous Article Hyperliquid eyes breakout amid $4B inflows, key upgrades
Next Article Stablecoins will fund U.S. debt and boost Bitcoin
Leave a Comment

Để lại một bình luận Hủy

Email của bạn sẽ không được hiển thị công khai. Các trường bắt buộc được đánh dấu *

Follow US

Find US on Socials
FacebookLike
- Advertisement -
Ad image
Popular News
Will SOL rally to $200?
Emergency Funds: Importance and How to Build One
Debt Management: Strategies to Pay Off Debt Efficiently
Riot Platforms unloads 475 BTC in its biggest single-month Bitcoin sale to date
Revolut partners with Lightspark to add Bitcoin Lightning for UK and EEA users
- Advertisement -
Ad image

Follow Us on Socials

We use social media to react to breaking news, update supporters and share information

Twitter Youtube Telegram Linkedin
Finances Investing and Crypto News

FICN.net brings you the latest in finance, investment, and crypto. Stay informed with expert insights, market analysis, and beginner guides. Whether you're new or experienced, FICN.net helps you explore opportunities, manage risks, and make smarter financial decisions in a fast-changing world.

Subscribe to our newsletter

You can be the first to find out the latest news and tips about trading, markets...

Ad image
© 2024 Finance, Investment, and Crypto News. All Rights Reserved.
Welcome Back!

Sign in to your account

Username or Email Address
Password

Lost your password?