Dozens of Fake Firefox Wallet Extensions Linked to Crypto-Stealing Malware
Forty are confirmed malicious, impersonating OKX, Rabby and TronLink to harvest recovery phrases from anyone who types one in.
Tuesday, 8 September 2026
Independent coverage of global markets, trade and finance
Crypto
Dozens of Fake Firefox Wallet Extensions Linked to Crypto-Stealing Malware
Forty are confirmed malicious, impersonating OKX, Rabby and TronLink to harvest recovery phrases from anyone who types one in.