Security News Popular Chrome Extensions Weaponized to Steal Crypto From 80,000 Users

[lokamoka820]

Content source

https://www.ghacks.net/2026/09/04/popular-chrome-extensions-weaponized-to-steal-crypto-from-80000-users/

Security researchers have uncovered a malicious campaign that used Chrome's extension system to steal cryptocurrency from tens of thousands of users. Researchers at Socket Inc. identified 19 malicious extensions aimed at Chrome and Edge users, with one widely used extension affecting about 80,000 people.

Many of the extensions appeared to work normally for months before attackers added malicious code. The extensions have since been removed from both browser stores, but users may still be affected if they have not manually removed the add-ons. Researchers believe a single actor is behind the campaign and is determined to continue.

 

[Parkinsond]

Surfing extenionsless; hope I can proceed this way.

 

[cartaphilus]

Surfing extenionsless; hope I can proceed this way.

To save your sanity I recommend using Advance Secvurity option in Chrome combined with Desktop version of AdGuard

 

[cartaphilus]

1) Create an Extension that promises security
2) spread awareness
3) sell extension to a 3rd party
4) profit

 

[Victor M]

Original findings by Socket with the list of extensions. So you can check if you have one of the malware extensions.

19 Chrome and Edge Extensions Deliver a Wallet Drainer and Credential-Stealing Payloads

Socket researchers found 18 Chrome extensions and one Edge extension delivering a wallet drainer, credential theft, and other malicious payloads.

socket.dev

 

[Zero Knowledge]

Original findings by Socket with the list of extensions. So you can check if you have one of the malware extensions.

19 Chrome and Edge Extensions Deliver a Wallet Drainer and Credential-Stealing Payloads

Socket researchers found 18 Chrome extensions and one Edge extension delivering a wallet drainer, credential theft, and other malicious payloads.

socket.dev

Thanks. This pisses me right off in news stories!! Name malicious extension but don't name them. JUST NAME THEM! For everyone's sake!