Beware: Fake Crypto Wallet Extensions Invade Firefox, Steal Your Coins!
Beware of fake Firefox extensions masquerading as popular crypto wallets, aiming to swipe your seed phrases faster than a magician’s card trick. These sneaky add-ons use real logos and fake reviews to lure you in, so stay sharp and don’t let your digital assets vanish like a rabbit in a hat!

Hot Take:
Ah, the joys of surfing the internet—where even your web browser might be plotting against your crypto stash! Seems like some sneaky cybercriminals have traded in their ski masks for digital ones, crafting fake Firefox extensions that impersonate popular cryptocurrency wallets. It’s like putting a “Free Candy” sign on a van and parking it outside a blockchain conference. Tsk, tsk, tsk.
Key Points:
- Over 40 malicious extensions on Firefox’s official add-ons store are impersonating popular cryptocurrency wallets.
- Extensions mimic wallets from Coinbase, MetaMask, and others, with malicious code to exfiltrate data.
- Russian-speaking threat group suspected behind the campaign, active since at least April.
- Fake reviews boost extension credibility, but some users report scams.
- Mozilla has an early detection system, yet fake extensions remain available.
Already a member? Log in here