Malicious Chrome Extension Steals Wallet Login Credentials and Enables Automated Trading

Cybersecuritynews •Tushar Subhra Dutta • January 13, 2026

A malicious Chrome extension called MEXC API Automator is abusing trust in browser add-ons to steal cryptocurrency trading access from MEXC users. Posed as a tool that helps automate trading and API key creation, it quietly takes control of newly created API keys and turns a normal browser session into a full account takeover channel. […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Malicious Chrome Extension Compromises Ethereum Wallets A malicious Chrome extension has been identified that steals wallet credentials and enables automated trading abuse. Users of Ethereum wallets are particularly affected, as the extension allows for full wallet takeovers. This incident highlights the ongoing risks associated with browser extensions and cryptocurrency security. 5 sources 29

Malicious Chrome Extension Steals Wallet Login Credentials and Enables Automated Trading

The full story

Extracted Entities

Attack Types (1)

Malware (1)