{"id":37193,"date":"2025-07-03T11:50:00","date_gmt":"2025-07-03T11:50:00","guid":{"rendered":"https:\/\/dev.tradesilvania.com\/over-40-fake-crypto-wallet-extensions-found-on-firefox\/"},"modified":"2025-07-03T11:50:00","modified_gmt":"2025-07-03T11:50:00","slug":"over-40-fake-crypto-wallet-extensions-found-on-firefox","status":"publish","type":"post","link":"https:\/\/www.tradesilvania.com\/en\/news\/over-40-fake-crypto-wallet-extensions-found-on-firefox\/","title":{"rendered":"Over 40 Fake Crypto Wallet Extensions Found on Firefox"},"content":{"rendered":"<p>\n                <img decoding=\"async\" src=\"https:\/\/www.tradesilvania.com\/wp-content\/uploads\/2025\/12\/Over-40-Fake-Crypto-Wallet-Extensions-Found-on-Firefox.png\" alt=\"Over 40 Fake Crypto Wallet Extensions Found on Firefox\" \/>\n            <\/p>\n<p>Over 40 fake extensions for the Mozilla Firefox browser that mimic popular crypto wallets have been identified in an ongoing cryptocurrency theft campaign, according to a report published by cybersecurity firm Koi Security.<\/p>\n<p>These fraudulent extensions pose as legitimate applications such as Coinbase, MetaMask, Trust Wallet, Phantom, Exodus, OKX, MyMonero, and Bitget. Once installed, the malicious extensions intercept users\u2019 wallet credentials and transmit them to a remote server controlled by attackers.<\/p>\n<p>The campaign has reportedly been active since April, with the latest extensions uploaded just last week. Koi Security has confirmed that more than 40 extensions are linked to this campaign and that the operation remains active.<\/p>\n<p>The attackers reportedly clone the names, logos, and even source code of official wallet extensions, adding malicious code to extract sensitive data. Some extensions also featured hundreds of fake five-star reviews to build user trust.<\/p>\n<p>Koi Security advises users to carefully verify any browser extension before installation and to use up-to-date security tools to protect their assets.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>            Over 40 fake extensions for the Mozilla Firefox browser that mimic popular crypto wallets have been identified in an ongoing cryptocurrency theft campaign, according to a report published by cybersecurity firm Koi Security.<\/p>\n<p>These fraudulent extensions pose as legitimate applications such as Coinbase, MetaMask, Trust Wallet, Phantom, Exodus, OKX, MyMonero,<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[95],"tags":[99,98],"class_list":["post-37193","post","type-post","status-publish","format-standard","hentry","category-news","tag-en","tag-news"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Fake Crypto Wallet Extensions Found on Firefox<\/title>\n<meta name=\"description\" content=\"Crypto extensions on Firefox steal credentials. Check crypto extensions carefully to avoid phishing and digital asset loss.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.tradesilvania.com\/en\/news\/over-40-fake-crypto-wallet-extensions-found-on-firefox\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Fake Crypto Wallet Extensions Found on Firefox\" \/>\n<meta property=\"og:description\" content=\"Crypto extensions on Firefox steal credentials. Check crypto extensions carefully to avoid phishing and digital asset loss.\" \/>\n<meta property=\"og:site_name\" content=\"Tradesilvania\" \/>\n<meta property=\"article:published_time\" content=\"2025-07-03T11:50:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.tradesilvania.com\/wp-content\/uploads\/2025\/12\/Over-40-Fake-Crypto-Wallet-Extensions-Found-on-Firefox.png\" \/>\n<meta name=\"author\" content=\"Ciprian Dobrescu\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ciprian Dobrescu\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\/\/www.tradesilvania.com\/en\/news\/over-40-fake-crypto-wallet-extensions-found-on-firefox\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.tradesilvania.com\/en\/news\/over-40-fake-crypto-wallet-extensions-found-on-firefox\/\"},\"author\":{\"name\":\"Ciprian Dobrescu\",\"@id\":\"https:\/\/www.tradesilvania.com\/en\/#\/schema\/person\/8b618e5f08987bd1790437e243343e0e\"},\"headline\":\"Over 40 Fake Crypto Wallet Extensions Found on Firefox\",\"datePublished\":\"2025-07-03T11:50:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.tradesilvania.com\/en\/news\/over-40-fake-crypto-wallet-extensions-found-on-firefox\/\"},\"wordCount\":170,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.tradesilvania.com\/en\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.tradesilvania.com\/en\/news\/over-40-fake-crypto-wallet-extensions-found-on-firefox\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.tradesilvania.com\/wp-content\/uploads\/2025\/12\/Over-40-Fake-Crypto-Wallet-Extensions-Found-on-Firefox.png\",\"keywords\":[\"en\",\"News\"],\"articleSection\":[\"News\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.tradesilvania.com\/en\/news\/over-40-fake-crypto-wallet-extensions-found-on-firefox\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.tradesilvania.com\/en\/news\/over-40-fake-crypto-wallet-extensions-found-on-firefox\/\",\"url\":\"https:\/\/www.tradesilvania.com\/en\/news\/over-40-fake-crypto-wallet-extensions-found-on-firefox\/\",\"name\":\"Fake Crypto Wallet Extensions Found on Firefox\",\"isPartOf\":{\"@id\":\"https:\/\/www.tradesilvania.com\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.tradesilvania.com\/en\/news\/over-40-fake-crypto-wallet-extensions-found-on-firefox\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.tradesilvania.com\/en\/news\/over-40-fake-crypto-wallet-extensions-found-on-firefox\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.tradesilvania.com\/wp-content\/uploads\/2025\/12\/Over-40-Fake-Crypto-Wallet-Extensions-Found-on-Firefox.png\",\"datePublished\":\"2025-07-03T11:50:00+00:00\",\"description\":\"Crypto extensions on Firefox steal credentials. Check crypto extensions carefully to avoid phishing and digital asset loss.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.tradesilvania.com\/en\/news\/over-40-fake-crypto-wallet-extensions-found-on-firefox\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.tradesilvania.com\/en\/news\/over-40-fake-crypto-wallet-extensions-found-on-firefox\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.tradesilvania.com\/en\/news\/over-40-fake-crypto-wallet-extensions-found-on-firefox\/#primaryimage\",\"url\":\"https:\/\/www.tradesilvania.com\/wp-content\/uploads\/2025\/12\/Over-40-Fake-Crypto-Wallet-Extensions-Found-on-Firefox.png\",\"contentUrl\":\"https:\/\/www.tradesilvania.com\/wp-content\/uploads\/2025\/12\/Over-40-Fake-Crypto-Wallet-Extensions-Found-on-Firefox.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.tradesilvania.com\/en\/news\/over-40-fake-crypto-wallet-extensions-found-on-firefox\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.tradesilvania.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Over 40 Fake Crypto Wallet Extensions Found on Firefox\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.tradesilvania.com\/en\/#website\",\"url\":\"https:\/\/www.tradesilvania.com\/en\/\",\"name\":\"Tradesilvania\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/www.tradesilvania.com\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.tradesilvania.com\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.tradesilvania.com\/en\/#organization\",\"name\":\"Tradesilvania\",\"url\":\"https:\/\/www.tradesilvania.com\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.tradesilvania.com\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.tradesilvania.com\/wp-content\/uploads\/2025\/09\/logo.svg.png\",\"contentUrl\":\"https:\/\/www.tradesilvania.com\/wp-content\/uploads\/2025\/09\/logo.svg.png\",\"width\":1023,\"height\":138,\"caption\":\"Tradesilvania\"},\"image\":{\"@id\":\"https:\/\/www.tradesilvania.com\/en\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.tradesilvania.com\/en\/#\/schema\/person\/8b618e5f08987bd1790437e243343e0e\",\"name\":\"Ciprian Dobrescu\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/c9d4a0036c29f1993936138cf5d96dd56bbdb88e32e9bcda4c184bc1b2579e18?s=96&d=mm&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/c9d4a0036c29f1993936138cf5d96dd56bbdb88e32e9bcda4c184bc1b2579e18?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/c9d4a0036c29f1993936138cf5d96dd56bbdb88e32e9bcda4c184bc1b2579e18?s=96&d=mm&r=g\",\"caption\":\"Ciprian Dobrescu\"},\"url\":\"https:\/\/www.tradesilvania.com\/en\/author\/ciprian\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Fake Crypto Wallet Extensions Found on Firefox","description":"Crypto extensions on Firefox steal credentials. Check crypto extensions carefully to avoid phishing and digital asset loss.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.tradesilvania.com\/en\/news\/over-40-fake-crypto-wallet-extensions-found-on-firefox\/","og_locale":"en_US","og_type":"article","og_title":"Fake Crypto Wallet Extensions Found on Firefox","og_description":"Crypto extensions on Firefox steal credentials. Check crypto extensions carefully to avoid phishing and digital asset loss.","og_site_name":"Tradesilvania","article_published_time":"2025-07-03T11:50:00+00:00","og_image":[{"url":"https:\/\/www.tradesilvania.com\/wp-content\/uploads\/2025\/12\/Over-40-Fake-Crypto-Wallet-Extensions-Found-on-Firefox.png","type":"","width":"","height":""}],"author":"Ciprian Dobrescu","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Ciprian Dobrescu","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/www.tradesilvania.com\/en\/news\/over-40-fake-crypto-wallet-extensions-found-on-firefox\/#article","isPartOf":{"@id":"https:\/\/www.tradesilvania.com\/en\/news\/over-40-fake-crypto-wallet-extensions-found-on-firefox\/"},"author":{"name":"Ciprian Dobrescu","@id":"https:\/\/www.tradesilvania.com\/en\/#\/schema\/person\/8b618e5f08987bd1790437e243343e0e"},"headline":"Over 40 Fake Crypto Wallet Extensions Found on Firefox","datePublished":"2025-07-03T11:50:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.tradesilvania.com\/en\/news\/over-40-fake-crypto-wallet-extensions-found-on-firefox\/"},"wordCount":170,"commentCount":0,"publisher":{"@id":"https:\/\/www.tradesilvania.com\/en\/#organization"},"image":{"@id":"https:\/\/www.tradesilvania.com\/en\/news\/over-40-fake-crypto-wallet-extensions-found-on-firefox\/#primaryimage"},"thumbnailUrl":"https:\/\/www.tradesilvania.com\/wp-content\/uploads\/2025\/12\/Over-40-Fake-Crypto-Wallet-Extensions-Found-on-Firefox.png","keywords":["en","News"],"articleSection":["News"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.tradesilvania.com\/en\/news\/over-40-fake-crypto-wallet-extensions-found-on-firefox\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.tradesilvania.com\/en\/news\/over-40-fake-crypto-wallet-extensions-found-on-firefox\/","url":"https:\/\/www.tradesilvania.com\/en\/news\/over-40-fake-crypto-wallet-extensions-found-on-firefox\/","name":"Fake Crypto Wallet Extensions Found on Firefox","isPartOf":{"@id":"https:\/\/www.tradesilvania.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.tradesilvania.com\/en\/news\/over-40-fake-crypto-wallet-extensions-found-on-firefox\/#primaryimage"},"image":{"@id":"https:\/\/www.tradesilvania.com\/en\/news\/over-40-fake-crypto-wallet-extensions-found-on-firefox\/#primaryimage"},"thumbnailUrl":"https:\/\/www.tradesilvania.com\/wp-content\/uploads\/2025\/12\/Over-40-Fake-Crypto-Wallet-Extensions-Found-on-Firefox.png","datePublished":"2025-07-03T11:50:00+00:00","description":"Crypto extensions on Firefox steal credentials. Check crypto extensions carefully to avoid phishing and digital asset loss.","breadcrumb":{"@id":"https:\/\/www.tradesilvania.com\/en\/news\/over-40-fake-crypto-wallet-extensions-found-on-firefox\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.tradesilvania.com\/en\/news\/over-40-fake-crypto-wallet-extensions-found-on-firefox\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.tradesilvania.com\/en\/news\/over-40-fake-crypto-wallet-extensions-found-on-firefox\/#primaryimage","url":"https:\/\/www.tradesilvania.com\/wp-content\/uploads\/2025\/12\/Over-40-Fake-Crypto-Wallet-Extensions-Found-on-Firefox.png","contentUrl":"https:\/\/www.tradesilvania.com\/wp-content\/uploads\/2025\/12\/Over-40-Fake-Crypto-Wallet-Extensions-Found-on-Firefox.png"},{"@type":"BreadcrumbList","@id":"https:\/\/www.tradesilvania.com\/en\/news\/over-40-fake-crypto-wallet-extensions-found-on-firefox\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.tradesilvania.com\/en\/"},{"@type":"ListItem","position":2,"name":"Over 40 Fake Crypto Wallet Extensions Found on Firefox"}]},{"@type":"WebSite","@id":"https:\/\/www.tradesilvania.com\/en\/#website","url":"https:\/\/www.tradesilvania.com\/en\/","name":"Tradesilvania","description":"","publisher":{"@id":"https:\/\/www.tradesilvania.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.tradesilvania.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.tradesilvania.com\/en\/#organization","name":"Tradesilvania","url":"https:\/\/www.tradesilvania.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.tradesilvania.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.tradesilvania.com\/wp-content\/uploads\/2025\/09\/logo.svg.png","contentUrl":"https:\/\/www.tradesilvania.com\/wp-content\/uploads\/2025\/09\/logo.svg.png","width":1023,"height":138,"caption":"Tradesilvania"},"image":{"@id":"https:\/\/www.tradesilvania.com\/en\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.tradesilvania.com\/en\/#\/schema\/person\/8b618e5f08987bd1790437e243343e0e","name":"Ciprian Dobrescu","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/c9d4a0036c29f1993936138cf5d96dd56bbdb88e32e9bcda4c184bc1b2579e18?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/c9d4a0036c29f1993936138cf5d96dd56bbdb88e32e9bcda4c184bc1b2579e18?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/c9d4a0036c29f1993936138cf5d96dd56bbdb88e32e9bcda4c184bc1b2579e18?s=96&d=mm&r=g","caption":"Ciprian Dobrescu"},"url":"https:\/\/www.tradesilvania.com\/en\/author\/ciprian\/"}]}},"_links":{"self":[{"href":"https:\/\/www.tradesilvania.com\/en\/wp-json\/wp\/v2\/posts\/37193","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tradesilvania.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.tradesilvania.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.tradesilvania.com\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tradesilvania.com\/en\/wp-json\/wp\/v2\/comments?post=37193"}],"version-history":[{"count":0,"href":"https:\/\/www.tradesilvania.com\/en\/wp-json\/wp\/v2\/posts\/37193\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.tradesilvania.com\/en\/wp-json\/wp\/v2\/media?parent=37193"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.tradesilvania.com\/en\/wp-json\/wp\/v2\/categories?post=37193"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.tradesilvania.com\/en\/wp-json\/wp\/v2\/tags?post=37193"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}