Dozens of Fake Firefox Wallet Extensions Linked to Crypto-Stealing Malware

Decrypt · 2026-08-25T14:10:05.000Z

Forty are confirmed malicious, impersonating OKX, Rabby and TronLink to harvest recovery phrases from anyone who types one in.

Source: Decrypt · 2026-08-25T14:10:05.000Z · fact-reporting