19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto-Draining Code
Researchers discover 19 Chrome and 1 Edge extension with malicious capabilities since 2024.
Intelligence analysis by Qwen 2.5 (3B)
Security researchers find 19 Chrome and 1 Edge extension with wallet-stealing and crypto-draining code since 2024.
Bad guys made some browser add-ons that trick people into installing them. These add-ons can steal money and personal information. The best way to stay safe is to not download add-ons from places you don't know and to keep your browser up to date.
Analysis
{"heading_1":"Modus Operandi","paragraph_1":"The biggest risk is the operational technique of acquiring legitimate extensions and releasing new versions with malicious functionality.","paragraph_2":"Chrome's default extension update settings allow for auto-updating to the latest version, providing a powerful vector for the threat actor.","paragraph_3":"Users should be vigilant and avoid downloading extensions from unknown sources and update their browsers regularly.","heading_2":"Technical Details","heading_3":"Implications and Recommendations"}
Key points
- 19 Chrome and 1 Edge extensions found with malicious code since 2024
- Extensions can steal money and personal information
- Users should be vigilant and update their browsers
- Security measures need to improve to prevent such attacks
- The threat actors have been operating for over two years
As security measures improve, the threat actors will likely find new ways to evade detection.
If the threat actors continue to operate, they could cause more damage and steal more money.
