19 Chrome and Edge extensions caught harvesting crypto wallet seeds

📅 28 August 2026 at 10:23 UTC📰 Cyber InsiderView original source ↗

Security researchers have uncovered 19 malicious Chrome and Edge extensions delivering cryptocurrency wallet drainers, credential stealers, session hijacking tools, and other remotely loaded malware. Socket Threat Research reports that the malicious versions appeared over the past six months, but code and infrastructure similarities link the activity to a campaign dating back to at least February … The post 19 Chrome and Edge extensions caught harvesting crypto wallet seeds appeared first on CyberInsider.

🤖 AI BriefingAuto-generated threat analysis

🔍Threat Overview

A campaign of malicious Chrome and Edge extensions, linked to 'Superior', has been discovered harvesting cryptocurrency wallet seeds, credential stealers, session hijacking tools, and other remotely loaded malware. The attackers published clean extensions first, then added malware after building user trust.

⚙️Technical Details

Affected Systems

ChromeEdge

Attack Vectors

Background service workers establishing persistent WebSocket connections with attacker-controlled serversInjecting JavaScript into visited pages through hidden HTML elements and event handlers

💥Impact Assessment

Severity: high

Who Is at Risk

Users of Chrome and Edge browsers, particularly cryptocurrency users

🛡️Recommended Actions

1Review installed extensions regularly and remove unnecessary add-ons

2Revoke sessions or change passwords if used sensitive accounts while a suspicious extension was installed

3Monitor for ownership changes in established extensions

📦Affected Products

ChromeEdge

Read the full article

This is a curated summary. The complete article is available at Cyber Insider.

Read on Cyber Insider ↗

← Back to feed