Security· ★★★· bearish·

Fake Phantom, Jupiter and Bitget wallet extensions found on Firefox

  • —The fakes copied the names, icons and marketing text of the genuine wallets
  • —Stolen data was routed to subdomains of the bonto[.]io server
  • —The fake Phantom's rating rose from 2.9 to 3.9 and reviews grew from 275 to 546 in days
  • —Socket previously found 16 malicious Firefox extensions posing as Rabby and OKX wallets
Why it matters: Malicious add-ons in an official browser store put users' seed phrases at risk and undermine trust in installing wallets through the browser.
Source: Bits.media
More on this
Security · Oct 8
16 Malicious Firefox Extensions Found Stealing Crypto Wallet Seed Phrases
 Security · Oct 26
Socket finds 16 fake Firefox wallet extensions impersonating Rabby and OKX
 Regulation · Oct 18
Weekly roundup: Germany delays crypto tax change, fake Ledger wallets found in MediaMarkt