Malicious imToken Chrome Extension Steals Crypto Wallet Credentials

Malicious imToken Chrome Extension Steals Crypto Wallet Credentials

First seen 9 Mar 2026, 11:39 UTC CybersecuritynewsThe420.InCyberpressEsecurityplanet 63.8

Article Content

Browse articles
ThreatCluster

A malicious Chrome extension named 'lmΤoken Chromophore' has been identified, masquerading as a color visualizer while stealing cryptocurrency wallet credentials, including seed phrases and private keys. Users of the popular imToken wallet, which has over 20 million customers globally, are particularly at risk due to the extension's deceptive nature.

Timeline

2026-03-07
Cybersecuritynews article published about the malicious extension
2026-03-08
The420.In article published detailing the extension's phishing techniques