Vulnerabilities

16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases

October 08, 2026 1 min read 4 views
cybersecurity threats news
Cybersecurity researchers have discovered a cluster of 16 malicious Mozilla Firefox extensions that are capable of stealing cryptocurrency wallet recovery phrases and private keys. "The extensions masquerade as wallet portals, desktop utilities, and browser tools, but their code intercepts recovery phrases and private keys during wallet import flows and attempts to send those secrets to

Was this article helpful?

0 found this helpful

Ready to protect your organization?

Get started with Phishlens and run your first phishing simulation today.