Malicious Chrome Extension Steals SOL Fees from Solana Users

A deceptive Chrome extension named Crypto Copilot has been identified, which poses as a legitimate Solana trading tool while secretly siphoning SOL from users' swap transactions. The extension, published on June 18, 2024, injects hidden transfer instructions into transactions, resulting in undisclosed fees being extracted from users. Security researchers at Socket discovered this malicious activity.