2024

Two malicious Google Chrome extensions have reportedly drained $800,000 from a cryptocurrency investor named “Sell When Over” on the X platform.
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
 <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 Total compromise appears to be about $800k. I suspect this was a Google chrome compromise containing a possible keylogger targeting specific wallet extension apps (either due to a Chrome vulnerability due to me delaying regular updates or getting malware that wasn't detected by… <a href="https://t.co/yMJfHAFzQo" target="_blank" data-wpel-link="external" rel="noopener noreferrer nofollow">pic.twitter.com/yMJfHAFzQo</a>— Sell When Over | 9000.sei (@sell9000) <a href="https://twitter.com/sell9000/status/1777184397717872889?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow" data-wpel-link="external">April 8, 2024</a>
 </blockquote>
 </div>
</figure>
The user suspects that the extensions, named “Sync test BETA (colorful)” and “Simple Game,” contained Keyloggers targeting wallet extension apps. Keyloggers record keystrokes, enabling attackers to access confidential information.
The issue arose after a recent Chrome update, which logged the user out of their extensions and tabs. Following a restart due to a Windows update, the user re-entered credentials, including seed phrases for cryptocurrency wallets, potentially compromising their data.
The malicious extensions sent funds to exchanges MEXC and Gate.io. Investigation revealed that “Sync test BETA (colorful)” was a keylogger sending data to an external PHP script, while “Simple Game” monitored tab activity.
Despite no visible browser issues, the user discovered the extensions later. This incident underscores the ongoing threat of malicious Chrome extensions in the cryptocurrency sector.
In related news, cybersecurity experts warn of similar attacks using malware like Rilide to steal crypto funds via rogue Chrome extensions, highlighting the need for heightened security measures.
<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow">
 Also Read: <a href="https://www.cryptotimes.io/2024/04/04/google-sues-crypto-scammers-over-fake-apps-on-play-store/" target="_blank" rel="noopener noreferrer nofollow" data-wpel-link="internal">Google sues crypto scammers over fake apps on play store</a>
</blockquote>

Malicious Chrome Extensions Drain $800K from Crypto Investor

The Crypto Times

在 2024年4月9日發表的其他文章

OKX Ventures Invests in Zeus Network, Boosting Altcoin’s Price

Funding rates remain high on BTC amid market dip, while $RBLZ could be primed for big gains

dWallet Network brings multi-chain DeFi to Sui, featuring native Bitcoin and Ethereum

ProBit Global Enlists Xensei, Trades XSEI Tokens: Report

Raffle Coin’s Unique Appeal Attracts Uniswap & Cardano Traders Predicted to Revolutionize the Raf...

Testimony Project - Stead DeFi

訂閱免費電子報，每天收取加密貨幣最新動態！