Safery Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
November 13, 2025
Last Seen
November 13, 2025

Safery is a malware family tracked across 2 threat clusters and 2 intelligence report mentions on ThreatCluster. First observed November 13, 2025; most recent activity November 13, 2025.

Overview

Safery is a malicious Chrome extension masquerading as a legitimate wallet tool that steals Ethereum wallet seed phrases from users. This highlights the persistent risk of credential theft via browser extensions and the attackers’ use of blockchain-related channels to monetize stolen data.

Related Threat Clusters

Recent Intelligence Reports

  • Chrome extension “Safery” steals Ethereum wallet seed phrases — Securityaffairs.Co · November 13, 2025
  • Fake Chrome Extension “Safery” Steals Ethereum Wallet Seed Phrases Using Sui Blockchain — Thehackernews · November 13, 2025

CVSS v3.1 Breakdown