{"id":217164,"date":"2025-07-04T06:10:37","date_gmt":"2025-07-04T11:10:37","guid":{"rendered":"https:\/\/lifeboat.com\/blog\/2025\/07\/over-40-malicious-firefox-extensions-target-cryptocurrency-wallets-stealing-user-assets"},"modified":"2025-07-04T06:10:37","modified_gmt":"2025-07-04T11:10:37","slug":"over-40-malicious-firefox-extensions-target-cryptocurrency-wallets-stealing-user-assets","status":"publish","type":"post","link":"https:\/\/lifeboat.com\/blog\/2025\/07\/over-40-malicious-firefox-extensions-target-cryptocurrency-wallets-stealing-user-assets","title":{"rendered":"Over 40 Malicious Firefox Extensions Target Cryptocurrency Wallets, Stealing User Assets"},"content":{"rendered":"<p><a class=\"aligncenter blog-photo\" href=\"https:\/\/lifeboat.com\/blog.images\/over-40-malicious-firefox-extensions-target-cryptocurrency-wallets-stealing-user-assets.jpg\"><\/a><\/p>\n<p>Cybersecurity researchers have uncovered over 40 malicious browser extensions for Mozilla Firefox that are designed to steal cryptocurrency wallet secrets, putting users\u2019 digital assets at risk.<\/p>\n<p>\u201cThese extensions impersonate legitimate wallet tools from widely-used platforms such as Coinbase, MetaMask, Trust Wallet, Phantom, Exodus, OKX, Keplr, MyMonero, Bitget, Leap, Ethereum Wallet, and Filfox,\u201d Koi Security researcher Yuval Ronen <a href=\"https:\/\/blog.koi.security\/foxywallet-40-malicious-firefox-extensions-exposed-4c14419de486\" rel=\"noopener\" target=\"_blank\">said<\/a>.<\/p>\n<p>The large-scale campaign is said to have been ongoing since at least April 2025, with new extensions uploaded to the Firefox Add-ons store as recently as last week.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Cybersecurity researchers have uncovered over 40 malicious browser extensions for Mozilla Firefox that are designed to steal cryptocurrency wallet secrets, putting users\u2019 digital assets at risk. \u201cThese extensions impersonate legitimate wallet tools from widely-used platforms such as Coinbase, MetaMask, Trust Wallet, Phantom, Exodus, OKX, Keplr, MyMonero, Bitget, Leap, Ethereum Wallet, and Filfox,\u201d Koi Security researcher [\u2026]<\/p>\n","protected":false},"author":427,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1761,34],"tags":[],"class_list":["post-217164","post","type-post","status-publish","format-standard","hentry","category-cryptocurrencies","category-cybercrime-malcode"],"_links":{"self":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/217164","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/users\/427"}],"replies":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/comments?post=217164"}],"version-history":[{"count":0,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/217164\/revisions"}],"wp:attachment":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/media?parent=217164"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/categories?post=217164"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/tags?post=217164"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}