Chrome Web Store extensions caught stealing crypto, browser data

Chrome Web Store extensions caught stealing crypto, browser data

Multiple extensions for Google Chrome and Microsoft Edge delivered a malware framework that deployed modules to steal cryptocurrency, sensitive data, and browser history, as well as inject ClickFix lures. [...]

Malicious browser extensions used stores as initial access

Researchers at Socket identified 19 malicious modules delivered through Chrome and Edge extensions, some of them originally benign or acquired from legitimate developers. The framework used encrypted WebSocket C2, stripped CSP protections...

Browser Extensions as Wallet Thieves: How a Sports App Became a Seed Phrase Collector

If you run a crypto wallet as a browser extension, today is the day to open your extension list. In August 2026 the security firm Socket disclosed two separate campaigns in which extensions for Firefox, Chrome and Edge harvested recovery phrases, private keys and login credentials for crypto...

Malicious Chrome and Edge Extensions Steal Crypto and Browser Data

A sophisticated extension campaign is harvesting browser data, hijacking crypto... The post Malicious Chrome and Edge Extensions Turn Browsers into Crypto-Stealing Traps appeared first on SecureReading.