SecurityUnverified

40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet Secrets

A set of 40 Mozilla Firefox extensions has been found to engage in cryptocurrency wallet theft by masquerading as OKX, Rabby Wallet, TronLink, and other Web3 products. According to the Socket Threat Research team, the extensions are part of a broader set of 77 browser add-ons that share source code and infrastructure overlaps. The campaign, dubbed Offside Wallet Theft Factory, is believed to

What happened

A set of 40 Mozilla Firefox extensions has been found to engage in cryptocurrency wallet theft by masquerading as OKX, Rabby Wallet, TronLink, and other Web3 products. According to the Socket Threat Research team, the extensions are part of a broader set of 77 browser add-ons that share source code and infrastructure overlaps. The campaign, dubbed Offside Wallet Theft Factory, is believed to

Why it matters

The development may change operating conditions or market expectations around Security. Further confirmation and measurable outcomes matter.

Affected entities

View evidence

1 reports · 1 original report · 1 independent

  1. The Hacker NewsPrimary source · Supports · EN · 100%
    40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet Secrets

Claims

  • 40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet Secrets Observed

Conflicts

No material conflict detected in the available evidence.

Timeline

  1. First reported
  2. Unverified · 42/64%

Market move following event

Market reaction is not yet available for this asset and time window.

Score explanation

Confidence · formula confidence-2.1.0
Source trust80
Independent corroboration51
Primary evidence35
Claim consistency82
Extraction confidence82
Attribution quality90
Impact · formula impact-2.1.0
Event magnitude45
Market relevance74
Entity significance42
Market breadth45
Novelty68
Urgency45
Ranking · formula rank-1.0.0
Confidence factor0.8425
Freshness factor0.7317
Breaking bonus0