16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases

Cybersecurity researchers have found 16 malicious Firefox extensions that can steal cryptocurrency wallet recovery phrases and private keys. These extensions disguise themselves as various tools and portals, including wallet portals and browser tools. They intercept sensitive information during wallet import processes. The stolen data is then sent to unknown parties, potentially allowing them to access the affected wallets. The extensions pose as legitimate services, including Rabby and OKX wallets. They are designed to blend in with genuine browser extensions, making them difficult to distinguish from legitimate tools.