"Firefox Browser, Advisory on Malicious Extensions Impersonating Cryptocurrency Wallets"

Heecheol Yang

Summary

"Koi Security announced that there have been organized hacking attempts using the Firefox extension program called FoxyWallet."
"Wu Blockchain reported that this program targeted well-known wallets like Coinbase, MetaMask, and Phantom to steal cryptocurrency wallet data."
"The media pointed out that evidence of Russian-language comments in the extension code suggests these attacks may have originated from a Russian-speaking group."

The cybersecurity company Koi Security has warned of organized hacking attempts using a Firefox extension called 'FoxyWallet'.

On the 3rd (local time), Wu Blockchain reported, "This program has been used to steal data from cryptocurrency wallet users" and added, "By impersonating well-known wallets such as Coinbase, MetaMask, and Phantom, it has stolen information through more than 40 extension programs."

The media also stated, "Given that there are Russian-language comments in the extension code, it is possible that these hacking attempts originated from a group using the Russian language."