Tries to Steal Crypto Through Fake Google Chrome Wallet Extensions by Mystery Hacker
Harry Denley, director of security at wallet provider MyCrypto, who identified the fake wallet extensions, said in a report Tuesday that Google has so far removed 49 extensions that purported to be well-known crypto wallets from its Chrome Web Store. The fake extensions are basic phishing plays. Posing as legitimate wallets, they leak personal information inputted by users, such as private keys and passwords, to the hacker, who can then drain balances in a matter of seconds. The fakes detected have so far claimed to be wallets such as Ledger, Trezor, Jaxx, Electrum, MyEtherWallet, MetaMask, Exodus, and KeepKey. Test amounts of crypto sent by Denley have not been picked up, suggesting that either the hacker has to manually empty wallets or that they are only interested in comparatively large balances. On the Chrome Web Store, most of these apps had consistently good reviews written typically in simplistic or broken English. On the basis that the admin email appears to be a Rus...