Back Cybersecuritynews

Malicious imToken Chrome Extension Caught Stealing Mnemonics and Private Keys

Cybersecuritynews •Dhivya • March 7, 2026

Socket’s Threat Research Team has discovered a malicious Google Chrome extension named “lmΤoken Chromophore” that actively steals cryptocurrency wallet credentials. Masquerading as a harmless hex color visualizer, the extension actually impersonates the popular non-custodial wallet brand imToken. Since its launch in 2016, imToken has served more than 20 million customers globally, making it a highly […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Malicious imToken Chrome Extension Steals Crypto Wallet Credentials A malicious Chrome extension named 'lmΤoken Chromophore' has been identified, masquerading as a color visualizer while stealing cryptocurrency wallet credentials, including seed phrases and private keys. Users of the popular imToken wallet, which has over 20 million customers globally, are particularly at risk due to the extension's deceptive nature. 4 sources 64

Malicious imToken Chrome Extension Caught Stealing Mnemonics and Private Keys

The full story

Extracted Entities

Attack Types (1)

Tools (2)