Off-topic for aiqbench
This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.
Hackers Use Fake Firefox Wallet Extensions to Steal Crypto Recovery Phrases

Hackers have used 16 malicious Firefox extensions to target cryptocurrency users with fake wallet screens that capture recovery phrases and private keys. The add-ons posed as wallet portals, desktop tools, and browser utilities, while hidden code attempted to send the secrets to attacker-controlled Cloudflare Workers. The campaign copied interfaces from Rabby Wallet and OKX Wallet, […] The post Hackers Use Fake Firefox Wallet Extensions to Steal Crypto Recovery Phrases appeared first on Cyber Security News.
Hackers have used 16 malicious Firefox extensions to target cryptocurrency users with fake wallet screens that capture recovery phrases and private keys. The add-ons posed as wallet portals, desktop tools, and browser utilities, while hidden code attempted to send the secrets to attacker-controlled Cloudflare Workers. The campaign copied interfaces from Rabby Wallet and OKX Wallet, turning familiar wallet import steps into traps. Mozilla had removed the malicious extensions from its marketplace by October 5, 2026. However, removal does not protect anyone who already…
Excerpt shown under the publisher's RSS terms · 83 words · full text and figures are on the publisher's site
Related coverage

Hackers Are Using Fake Crypto Wallet Screens to Steal Recovery Phrases and Browser Sessions
Cybersecurity News · Jul 28, 2026

19 Chrome and Edge Extensions Caught Stealing Crypto Wallets and Passwords
Cybersecurity News · Aug 31, 2026

MacSync macOS Stealer Uses Fake Claude Guide to Steal Passwords and Crypto Wallets
Cybersecurity News · Aug 3, 2026

Hackers Hide RevStealer Inside Fake Claude Opus 5 App to Steal Passwords and Crypto
Cybersecurity News · Sep 1, 2026