Skip to content

GreedyBear Hacking Group Expands Operations with Weaponized Firefox Extensions Targeting Crypto Users

2025-08-10 15:28:17

GreedyBear Hacking Group Expands Operations with Weaponized Firefox Extensions Targeting Crypto Users

Main Idea

The GreedyBear hacking group has expanded its operations by using weaponized Firefox extensions to steal over $1 million in cryptocurrency, targeting global and Russian-speaking users.

Key Points

1. GreedyBear employs a technique called 'Extension Hollowing' to steal cryptocurrency.

2. The group has used 150 weaponized Firefox extensions, resulting in over $1 million in losses.

3. Victims include global/English-speaking users (with disclosed losses) and Russian-speaking users (with undisclosed losses).

4. Users are advised to remove suspicious extensions and change wallet credentials if compromised.

5. Legitimate crypto wallet software can be identified by checking user reviews and ratings.

Description

The GreedyBear hacking group has intensified its operations, utilizing 150 weaponized Firefox extensions to steal over $1 million in cryptocurrency from victims. GreedyBear’s tactics include creating fake crypto wallet extensions

>> go to origin page
Tags:
News

More Reading