suspectedhighSupply chainFirst reported Oct 8, 2026
Mozilla Firefox: 16 malicious add-ons impersonate Rabby and OKX wallets to steal crypto keys
Researchers identified 16 malicious Firefox extensions posing as wallet portals, desktop utilities, and browser tools. The extensions intercept cryptocurrency wallet recovery phrases and private keys during wallet import flows and exfiltrate them to attacker-controlled infrastructure.
Members only
The full record: the timeline and 2 linked reports
- Every update as it happened, with the status at each step
- Every report behind the record, newest first
- Alerts the moment Mozilla Firefox (add-ons marketplace) — or anything else you track — is hit again
A free account is all it takes — no card, one minute.