Security· ★★★· bearish·

HP: fake AI traders impersonate MetaMask, Coinbase Wallet, and Phantom extensions

  • —Seven extensions were targeted: MetaMask, Coinbase Wallet, Phantom, Trust Wallet, OKX Wallet, Atomic Wallet, Tonkeeper
  • —The download was disguised as a Microsoft-signed program to bypass SmartScreen
  • —Needle Stealer used DLL side-loading through a signed OLEView
  • —No data was provided on the number of victims or the volume of losses
Why it matters: Replacing wallet extensions allows seed phrases and passwords to be stolen from mass users, raising the risk of losses for holders of assets in popular wallets.
Source: Crypto Daily
More on this
Security · 21:45
Supplier Data Breaches Are Driving Physical Attacks on Crypto Holders
 Security · 20:40
Curaçao gambling regulator hacked, crypto casino data at risk of doxxing
 Security · 20:35
Ledger CTO Warns of DarkSword iOS Exploit Stealing Crypto via Safari