19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto

Back Thehackernews

19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto

Thehackernews • August 28, 2026

Share: View original

AI can find and chain vulnerabilities in minutes. This session gives you a practical roadmap to strengthen visibility, response, and remediation.

Learn how to identify exploitable risk faster, prioritize what matters most, and reduce exposure before AI-powered attacks accelerate the threat.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Malicious Chrome and Edge Extensions Target Crypto Users A coordinated malware campaign has compromised 19 browser extensions—18 for Chrome and 1 for Edge—designed to steal cryptocurrency wallet secrets and login credentials. The campaign, named 'Superior,' has been active since February 2024 and uses a strategy where legitimate extensions are acquired and later weaponized. The most impactful extension, 'Enable Right Click & Copy — Smart Unlock + OCR,' had around 80,000 users before malicious code was introduced. Attackers utilize techniques such as establishing persistent WebSocket connections and injecting hidden scripts to exfiltrate sensitive data. While the Chrome version of the extension has been removed, the Edge version remains active. The malicious extensions have been linked to a broader campaign that has evolved over time, indicating a sustained effort to exploit users. Researchers are tracking the operation closely due to its potential widespread impact on users' security. 10 sources 69

Extracted Entities

Platforms (1)

Tools (1)