A cybersecurity firm, Koi Security, uncovered over 40 fake Firefox browser extensions designed to steal crypto wallet credentials.
These malicious extensions impersonated popular crypto wallet tools like MetaMask, Coinbase, Trust Wallet, and others, allowing attackers to access sensitive information.
The campaign, active since April 2025, is sophisticated and long-lasting, with extensions uploaded as recently as last week, posing a significant threat to users' assets and data.
The report suggests that users stick to official wallet recommendations, verify developer information on add-on pages, and be cautious when granting permissions to browser extensions.