GreedyBear Heist: $1 Million in Crypto Stolen Through Over 650 Scam Tools

Key Points

1. GreedyBear used fake browser extensions, scam sites, and malware to steal cryptocurrency.

2. The group published over 150 fake wallet extensions on the Firefox extension store, mimicking legitimate wallets like MetaMask and TronLink.

3. GreedyBear employed deceptive tactics, such as initially uploading harmless versions of extensions to avoid detection before introducing malicious code.

4. The group's multi-pronged approach, combining browser extensions, ransomware, and phishing sites, proved highly effective in their theft scheme.

5. A cybersecurity report from Koi Security detailed the group's activities, highlighting their use of over 650 scam tools in their operations.