• Google has shut down malicious chrome extensions that steal crypto wallet credentials.
  • The extensions posed as legitimate crypto wallet apps like Ledger and Trezor
  • Researchers believe these extensions are affiliated with a Russian group

Google has done a little spring cleaning in its Chrome Web Store leading to the removal of a swath of malicious cryptocurrency-stealing app extensions in a single sweep.

The internet giant has shut down 49 malicious Chrome extensions from the app marketplace. The extensions were found to have been stealing cryptocurrency keys and wallet details from users.

Google Targets Bogus Crypto Wallet Apps

The malicious extensions were discovered by Harry Denley, the Director of Security at the MyCrypto platform. Denley told ZDNet that most of these extensions are camouflaged as legitimate wallet apps. However, they contain malicious code that enables them to steal private keys, mnemonic phrases, and other relevant information.

Denley clarified that some of the prominent wallet apps that these clones mimic include Trevor, KeepKey, Ledger, Exodus, and MyEtherWallet. These fake extensions all work identical to the original apps, but any details that customers enter on the fake extensions are immediately sent to the attackers’ server.

He also added that the extensions appear to have been developed by a cybercrime group which he suspects to be from Russia.

The security executive also pointed out that most of the thefts don’t happen immediately. Per an experiment he carried out, he realized that the hackers don’t actually steal funds as soon as they get the login credentials. He argues that it’s either the attackers haven’t gotten a grasp of how to automate their processes (and as such, is manually accessing each account), or they’re more interested in stealing from high-value targets alone.

Significant Threat to the Safety of the Industry

The threat of fake browser extensions in the crypto space has always been a prominent one. Last month, Ledger warned its users about a fake Chrome extension wreaking havoc and stealing funds.

According to the French cryptocurrency wallet manufacturer, the malicious browser extension was requesting users’ recovery seeds, which would then be used to access their accounts.

The fake extension in question tried to mimic Ledger Live, an extension that allows users to sync their Ledger wallets with a trusted device and approve transactions in Chrome.

Jimmy Aki

Based in the UK, Jimmy has been following the development of blockchain for several years, and he is optimistic about its potential to democratize the financial system. He's an economic researcher with outstanding hands-on and heads-on experience in Macroeconomic finance analysis, forecasting, and planning. He has honed his skills having worked cross-continental as a finance analyst, which gives him inter-cultural experience. He has a strong passion for regulation and macroeconomic trends as it allows him to peek under the global bonnet to see how the world works. Follow him on Twitter: @adejimi

Follow Author

Want to know more?

Join our Telegram Group and get trading signals, a free trading course and daily communication with crypto fans!

This site uses cookies.
Click here to accept the use of these cookies. View our cookie policy

We are discussing it in our Telegram Channel

Join

We are discussing it in our Telegram Channel

Join