Socket on Mythryl: “cc: @campuscodi.risky.biz @darkreading.bsky.social @coindesk.com…”

Socket found 16 malicious Firefox extensions impersonating Rabby and OKX wallets, built to steal recovery phrases and private keys. All 16 claim to collect no data. The malware sends wallet secrets to attacker-controlled Cloudflare Workers. socket.dev/blog/firefox...

socket.dev16 Malicious Firefox Extensions Steal Cryptocurrency Wallet CredentialsSocket found 16 malicious Firefox extensions designed to steal crypto wallet recovery phrases and private keys using cloned Rabby and OKX interfaces.

Post