Skip to content
Malicious imToken Chrome Extension Steals Crypto Wallet Credentials

Malicious imToken Chrome Extension Steals Crypto Wallet Credentials

First seen 9 Mar 2026, 11:39 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 16:10 UTC

A malicious Chrome extension named 'lmΤoken Chromophore' has been identified, masquerading as a color visualizer while stealing cryptocurrency wallet credentials, including seed phrases and private keys. Users of the popular imToken wallet, which has over 20 million customers globally, are particularly at risk due to the extension's deceptive nature.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 212d ago How this analysis works

Timeline

2026-03-07
Cybersecuritynews article published about the malicious extension
2026-03-08
The420.In article published detailing the extension's phishing techniques

More articles in this cluster (4)