40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet Secrets

The Hacker News 20 August 2026, 11:42 EEST Browsers

A set of 40 Mozilla Firefox extensions has been found to engage in cryptocurrency wallet theft by masquerading as OKX, Rabby Wallet, TronLink, and other Web3 products. According to the Socket Threat Research team, the extensions are part of a broader set of 77 browser add-ons that share source code and infrastructure overlaps. The campaign, dubbed Offside Wallet Theft Factory, is believed to…

Read the full story on The Hacker News https://thehackernews.com/2026/08/40-malicious-firefox-extensions-pose-as.html

Keep reading

Chrome DevTools Technique Enables Authenticated Session Hijacking in Live Windows Browsers The Hacker News
AmnesiaStealer Hijacks Chromium Sessions to Give Attackers Live Browser Control on macOS The Hacker News
Hundreds of fake Chrome VPN extensions route traffic through a proxy BleepingComputer
737 Chrome VPN Extensions Caught Routing Traffic Through Proxies. Check If You Have One The Hacker News