Malicious Chrome Extensions Drain $800K from Crypto Investor

by

According to reports, two potentially harmful Google Chrome extensions allegedly took around $800,000 from an individual investor in cryptocurrencies, identified as “Sell When Over,” on the X platform.

Approximately $800,000 seems to have been entirely surrendered in this instance. I have my suspicions that this was a breach of Google Chrome security, potentially involving a keylogger designed to infiltrate certain digital wallet extensions. This could be the result of a Chrome vulnerability, with my neglecting to install timely updates, or an undetected malware infection.

— Sell When Over | 9000.sei (@sell9000) April 8, 2024

It’s possible that the user is concerned about two add-ons, titled “Sync test BETA (colorful)” and “Simple Game.” These extensions may have included Keyloggers, which function by tracking and recording keyboard inputs. This data can then be exploited by attackers to gain unauthorized access to information stored in wallet applications.

After a more recent Chrome version was installed, the user encountered an issue that caused their extensions and open tabs to log out. Subsequently, due to a necessary Windows update, the device restarted. Upon rebooting, the user had to input their login information once again, including sensitive data such as cryptocurrency wallet seed phrases, increasing the risk of a data breach.

Malicious add-ons transferred money to exchanges MEXC and Gate.io, according to investigations. It was discovered that “Sync test BETA (vibrant)” functioned as a keylogger, sending information to an external PHP script. Meanwhile, “Simple Game” kept track of tab activity.

Although there were no apparent problems with the browser, the user eventually found out about the unwanted extensions. This occurrence serves as a reminder of the continuous danger posed by malicious Chrome extensions in the digital currency market.

Cybersecurity specialists issue a warning about potential threats: Hackers may use malware comparable to Rilide to swipe crypto assets through deceitful Chrome add-ons. This underscores the importance of strengthened protective measures.

Read More

2024-04-09 08:56