19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto-Draining Code

Researchers have found 19 browser extensions, 18 for Chrome and 1 for Edge, that contain code to steal wallet secrets and drain cryptocurrency. These extensions were published over the last six months and share similarities in their code and tactics. The discovery was made by Socket security researcher Karlo Zanki, who found evidence suggesting the campaign may have been ongoing. The extensions' capabilities include stealing wallet secrets and draining cryptocurrency, posing a threat to users' financial assets. The fact that the extensions share similarities in code and tradecraft implies a potential connection between them. The campaign's duration and scope are still being investigated.