19 Chrome and Edge Extensions Found Stealing Crypto Wallets
Researchers discovered 19 malicious Chrome and Edge browser extensions that steal cryptocurrency wallet secrets, indicating a coordinated campaign.
Why it matters
The presence of these extensions jeopardizes the security of cryptocurrency holders by targeting wallet secrets, necessitating focused detection and removal efforts.
SOC impact
Security teams must examine browser extension telemetry for suspicious activity related to crypto wallet access, identify affected users, and monitor for signs of unauthorized wallet interactions to contain the threat.
Recommended actions
- Inventory deployed Chrome and Edge extensions for potential malicious activity
- Monitor browser telemetry for unusual access to crypto wallets
- Investigate reported incidents of unexplained cryptocurrency losses
- Review user reports for suspicious extension behavior
- Assess organizational use of vulnerable extensions
Executive Summary
Security researchers have uncovered 19 malicious browser extensions active on Chrome and Edge over a six-month period that steal secrets from cryptocurrency wallets. The shared code signatures among these extensions suggest a coordinated attack campaign targeting crypto holders. This discovery underscores the evolving threat landscape aimed at browser-based crypto wallet theft.
Operational teams should prioritize identifying affected systems and user environments where these extensions have been installed. Monitoring for abnormal interactions with wallet applications or unauthorized access attempts is critical to mitigating potential impact and protecting digital assets.
SOC Impact
Security teams must examine browser extension telemetry for suspicious activity related to crypto wallet access, identify affected users, and monitor for signs of unauthorized wallet interactions to contain the threat.
Browser Extension and Wallet Access Validation
- Inventory deployed Chrome and Edge extensions for potential malicious activity
- Monitor browser telemetry for unusual access to crypto wallets
- Investigate reported incidents of unexplained cryptocurrency losses
- Review user reports for suspicious extension behavior
- Assess organizational use of vulnerable extensions
Why It Matters
The presence of these extensions jeopardizes the security of cryptocurrency holders by targeting wallet secrets, necessitating focused detection and removal efforts.