Fake Firefox extensions aim to steal cryptocurrency wallets
Bitget2025/07/03 18:50- Over 40 fake extensions compromise cryptocurrency wallets
- Criminals use wallet names like MetaMask and Coinbase
- Attacks remain active and threaten Firefox users
Cybersecurity experts have identified more than 40 malicious extensions in the Firefox browser designed to steal cryptocurrency wallet credentials. According to a report released by Koi Security, the criminals behind the operation use the names of popular platforms, such as Coinbase, MetaMask and Trust Wallet, to deceive users and collect sensitive information.
🚨 Watch out, crypto enthusiasts! Over 40 fake Firefox extensions mimicking popular wallets have been found. These phishing scams are after your private keys! Check your extensions and stay safe. 🔐 #CryptoSecurity #PhishingAlert
— ₿itBlitz (@BitBlitz) July 3, 2025
These fake extensions pose as legitimate digital wallet tools and, once installed, secretly extract sensitive data from users, exposing digital assets to theft risks. In addition to the aforementioned, other affected brands include Phantom, Exodus, OKX, MyMonero, Bitget, Leap and Keplr.
According to report , the campaign has been active since at least April 2025, with new malicious extensions being uploaded to the Firefox Add-ons Store as recently as last week. The continued activity suggests a persistent operation, with the ability to adapt and update.
To increase the credibility of the fake extensions, the attackers used fake reviews with five-star ratings. Many of the extensions had hundreds of reviews simulating positive experiences, which increased the likelihood of being installed by unsuspecting users.
Koi Security also found clues that indicate the possible involvement of a Russian-speaking cybercriminal group. Fragments of code with comments written in Russian and metadata extracted from files hosted on the servers used in the operation reinforce this suspicion. “While not conclusive, these artifacts suggest that the campaign may have originated from a Russian-speaking cybercriminal group,” the report states.
The security firm emphasizes that the campaign is ongoing, with active extensions still available in the official store. Cryptocurrency wallet users should be extra careful when installing any add-on in Firefox, checking official sources and the authenticity of the tool.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
Anthropic's Core Concern: Revenue Can Be Withdrawn at Any Time, but Computing Power Costs Are Locked in for up to 20 Years
Zheshang Securities believes that Anthropic's revenue is mainly based on usage-based billing, with remaining performance obligations covering only about 5.1 months of annualized revenue, while compute power costs are already locked in with $895.4 billion in irrevocable commitments, some extending as far as 2045. Revenues can be reduced at any time, but costs are non-exitable, creating a highly asymmetric maturity gap between the two—this is the company's real core constraint.
Triple Pressure from the Federal Reserve, Treasury, and Congress; Goldman Sachs: Liquidity Crisis May Occur in 2027
Goldman Sachs warns that the reserve ratio of bank assets has dropped to around 11%, only slightly above the crisis trough of 2019. In the second half of 2027, a deadlock in debt ceiling negotiations will force the Treasury to rebuild the TGA, triggering a "perfect storm" of a sharp drop in reserves and a surge in T-bill supply; combined with stalled money market fund buying, this will create a huge liquidity black hole. The Federal Reserve could be forced into the awkward position of lowering interest rates and launching large-scale bond purchases to rescue the market.
U.S. Stock IPO Preview | From Losses to Net Profit of 5.46 Million: The "Three-Dimensional" Platform Business Strategy with a Taste for Golf
Crossing the break-even line, the growth inflection point has arrived.
Crypto prices
More
