16 Fake Rabby and OKX Wallet Extensions Targeted Firefox Users
Photo: TokenPost
Sixteen Firefox add-ons impersonating Rabby Wallet and OKX Wallet targeted wallet imports with code designed to capture recovery phrases and private keys, putting users of functioning variants at risk. Four extensions imitated Rabby Wallet and 12 presented OKX Wallet interfaces. Mozilla had unpublished all 16 by Oct. 5. The extensions targeted wallet-import screens and carried code to collect credentials and send them to attacker-controlled Cloudflare Workers. Their Firefox manifests declared that they collected no data, even though the extensions contained code to collect wallet credentials.
Also reported by The Defiant.
Source: TokenPost
