Over 40 Fake Crypto Wallet Extensions on Firefox, Are Your Funds at Risk?

Key Points

1. Over 40 fake Firefox extensions impersonate well-known crypto wallets like MetaMask, Coinbase, and Trust Wallet to steal funds.

2. The campaign, active since April 2025, uses technical spoofing to evade detection and targets crypto users globally.

3. Koi Security attributes the campaign to a Russian-speaking group, highlighting its organized and persistent nature.

4. The fake extensions mimic official wallet providers, increasing the risk of users falling victim to the scam.

5. The report underscores broader implications for crypto security, emphasizing the need for vigilance against such threats.