LOWVulnerability
Global

16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases

·Source: The Hacker News

Updated:

Executive Summary

Cybersecurity researchers have discovered a cluster of 16 malicious Mozilla Firefox extensions that are capable of stealing cryptocurrency wallet recovery phrases and private keys. "The extensions masquerade as wallet portals, desktop utilities, and browser tools, but their code intercepts recovery phrases and private keys during wallet import flows and attempts to send those secrets to

Analysis

Cybersecurity researchers have discovered a cluster of 16 malicious Mozilla Firefox extensions that are capable of stealing cryptocurrency wallet recovery phrases and private keys. "The extensions masquerade as wallet portals, desktop utilities, and browser tools, but their code intercepts recovery phrases and private keys during wallet import flows and attempts to send those secrets to
Source Attribution

Originally published by The Hacker News on Oct 8, 2026.

Related Threats

MEDIUMVulnerabilityNEW

Wise to pay clients' tax bills after software error

Money transfer app Wise is reportedly negotiating a settlement with the UK's tax authorities over technical errors that led thousands of clients to pay the wrong amount of tax on their investments.

Finextra
MEDIUMVulnerability

Europol and US GAO Sound the Alarm Over Quantum Threats

Europol and US Government Accountability Office urge faster transition to post-quantum cryptography

Infosecurity Magazine
MEDIUMVulnerability

FBI and Secret Service Warn of FortiBleed Lockout Threat

The FBI and Secret Service are warning Fortigate admins that their systems are still being targeted

Infosecurity Magazine