Chrome Extension Turns Cyber Trap: Google Lens Tool Used To Steal Crypto Credentials

Back The420.In

Chrome Extension Turns Cyber Trap: Google Lens Tool Used To Steal Crypto Credentials

The420.In • March 2, 2026

Share: View original

Researchers noted that the compromised update introduced remote code execution capabilities. The malicious functionality reportedly used an image ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

QuickLens Chrome Extension Compromised to Steal Crypto Credentials The QuickLens Chrome extension, which allowed users to perform Google Lens searches, was compromised on February 17, 2026, with the release of version 5.8 that introduced malware capable of stealing cryptocurrency credentials. Approximately 7,000 users were affected before the extension was removed from the Chrome Web Store. Researchers identified that the malicious update enabled remote code execution, posing significant risks to users' crypto assets. 8 sources 29

Extracted Entities

Attack Types (1)

MITRE ATT&CK (2)

T1195 - Supply Chain Compromise T1203 - Exploitation for Client Execution

Platforms (1)

Chrome Extension

Tools (1)