Malware Discovered in Browser Extensions
A recent investigation by security analysts has uncovered the existence of malware concealed within 19 browser extensions for Chrome and Edge, compromising users’ cryptocurrency wallets and harvesting sensitive personal information. The malicious extensions were found to target wallets associated with Solana, Tron, and Ethereum Virtual Machine (EVM), and were capable of extracting data from social media platforms such as Facebook and LinkedIn, as well as users’ browsing history and login credentials, according to reports from the security firm, Socket.
Details of the Compromised Extensions
Notably, five of these extensions initially began as legitimate applications, only to be acquired later by cybercriminals who infused them with malware. The remaining 14 extensions were outright creations of attackers, entering the marketplace as clean tools before receiving malicious updates post-installation. Among the identified extensions were names like:
- Enable Right Click & Copy
- RapidLens
- QuickLens
- Private Crypto News Reader
- DeFi Pulse Tracker
Response and Recommendations
In response to these findings, Google has removed the compromised extensions from the Chrome Web Store. Users who have downloaded any of these extensions are advised to consider their personal data compromised and to promptly change their passwords to safeguard their accounts. Socket, which specializes in monitoring open-source projects and browser add-ons for hidden threats, continues to observe ongoing trends in malware infiltration.
Stay Informed
Stay in the loop on developments regarding finance, cryptocurrencies, and the digital future by following us on various social media platforms.
