Socket found 16 malicious Firefox extensions posing as Rabby and OKX. These crypto wallet stealers grabbed seed phrases. Here is what to do.
#Firefox #CryptoWallet #BrowserExtensions #SeedPhrase #Rabby #OKX #Socket #CyberSecurity
#browserextensions — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #browserextensions, aggregated by home.social.
-
Researchers identified 16 malicious Firefox add-ons impersonating Rabby and OKX wallet tools.
Four posed as Rabby Wallet and 12 as OKX Wallet.
According to the researchers, the add-ons recorded recovery phrases and private keys when users entered wallet details, then tried to send them to attackers.
All 16 had been removed by October 5, 2026; the article does not report confirmed wallet access or stolen funds.
Any…