Socket uncovered malicious Firefox extensions impersonating Phantom, Jupiter, and Bitget to steal recovery phrases and private keys. The fake Phantom wallet also bundled the operator’s backend for automatically draining funds. socket.dev/blog/firefox...
socket.devMalicious Firefox Extensions Impersonate Phantom, Jupiter, and Bitget to Steal Wallet SecretsMalicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.
1 repost1 like