This malicious Firefox extension will drain your crypto wallet

A malicious Firefox add-on named "Safepal Wallet" managed to stay listed on the official Mozilla add-ons website for seven month...

A malicious Firefox add-on named "Safepal Wallet" managed to stay listed on the official Mozilla add-ons website for seven months as it scammed users by emptying out their cryptocurrency wallets.

SafePal is a legitimate hardware cryptocurrency wallet that is designed to hold more than 10,000 types of assets, including Bitcoin, Ethereum, and Litecoin.

However, while the wallet does have official smartphone apps available for both Apple AppStore and Google Play Store, the website doesn’t list any browser extensions.

TechRadar needs you!

We're looking at how our readers use VPNs with streaming sites like Netflix so we can improve our content and offer better advice. This survey won't take more than 60 seconds of your time, and we'd hugely appreciate if you'd share your experiences with us.

>> Click here to start the survey in a new window <<

“After I installed this extension and logged in with my credentials it was not working,” reported Firefox user Cali, adding that when they checked back about 8 hours later, their cryptos worth around $4000 had been transferred to another wallet.

Due diligence

Within five days of Cali's public report of the incident this month, a Mozilla spokesperson responded saying that they were investigating the incident, before dropping the fake add-on’s listing.

Reporting on the development, BleepingComputer explains that in order to publish an add-on on Mozilla's add-ons website, developers must follow a submission process that states submitted add-ons are "subject to review by Mozilla at any time."

However, the extent of such a review isn’t specified, nor has Mozilla explained how the fake add-on managed to get listed.

Furthermore, while the malicious browser add-on has been taken down, BleepingComputer reports that the phishing website set up by the threat actors is still up. 

The website asks users for their secret twelve-word backup phrase in order to pair the SafePal wallet, which is then silently sent to the threat actor behind the fake extension.

Via BleepingComputer



from TechRadar - All the latest technology news https://ift.tt/3ufwwlB
via IFTTT

COMMENTS

BLOGGER
Name

Apps,3858,Business,151,Camera,1155,Earn $$$,3,Gadgets,1741,Games,926,GTA,1,Innovations,3,Mobile,1697,Paid Promotions,5,Promotions,5,Sports,1,Technology,8106,Trailers,796,Travel,37,Trending,4,Trendly News,25335,TrendlyNews,110,Video,5,XIAOMI,13,YouTube - 9to5Google,109,
ltr
item
Trendly News | #ListenNow #Everyday #100ShortNews #TopTrendings #PopularNews #Reviews #TrendlyNews: This malicious Firefox extension will drain your crypto wallet
This malicious Firefox extension will drain your crypto wallet
Trendly News | #ListenNow #Everyday #100ShortNews #TopTrendings #PopularNews #Reviews #TrendlyNews
http://www.trendlynews.in/2021/09/this-malicious-firefox-extension-will.html
http://www.trendlynews.in/
http://www.trendlynews.in/
http://www.trendlynews.in/2021/09/this-malicious-firefox-extension-will.html
true
3372890392287038985
UTF-8
Loaded All Posts Not found any posts VIEW ALL Readmore Reply Cancel reply Delete By Home PAGES POSTS View All RECOMMENDED FOR YOU LABEL ARCHIVE SEARCH ALL POSTS Not found any post match with your request Back Home Sunday Monday Tuesday Wednesday Thursday Friday Saturday Sun Mon Tue Wed Thu Fri Sat January February March April May June July August September October November December Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec just now 1 minute ago $$1$$ minutes ago 1 hour ago $$1$$ hours ago Yesterday $$1$$ days ago $$1$$ weeks ago more than 5 weeks ago Followers Follow THIS PREMIUM CONTENT IS LOCKED STEP 1: Share. STEP 2: Click the link you shared to unlock Copy All Code Select All Code All codes were copied to your clipboard Can not copy the codes / texts, please press [CTRL]+[C] (or CMD+C with Mac) to copy