{"id":34819,"date":"2020-05-06T20:55:29","date_gmt":"2020-05-06T20:55:29","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords\/"},"modified":"2020-05-06T20:55:29","modified_gmt":"2020-05-06T20:55:29","slug":"fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords\/","title":{"rendered":"Fake crypto-wallet extensions appear in Chrome Web Store once again, siphoning off victims&#8217; passwords"},"content":{"rendered":"<p>Three weeks after Google removed 49 Chrome extensions from its browser&#8217;s software store for stealing crypto-wallet credentials, 11 more password-swiping add-ons have been spotted \u2013 and some are still available to download.<\/p>\n<p>The dodgy add-ons masquerade as legit crypto-wallet extensions, and invite people to type in their credentials to access their digital money, but are totally unofficial, and designed to siphon off those login details to crooks.<\/p>\n<p>Harry Denley, director of security at MyCrypto, who identified the <a target=\"_blank\" href=\"https:\/\/www.theregister.co.uk\/2020\/04\/15\/google_malicious_chrome\/\" rel=\"noopener noreferrer\">previous lot of bad extensions<\/a>, told <em>The Register<\/em> at least eight among the latest crop of 11 impostors, pretending to be crypto-wallet software KeyKeep, Jaxx, Ledger, and MetaMask, have been taken down.<\/p>\n<p>Denley provided <em>The Register<\/em> with a list of extension identifiers, previously reported to Google, and we were able to find some still available in the Chrome Web Store at time of writing.<\/p>\n<p>Dan Finlay, lead developer of MetaMask, took to Twitter to get help from Google, <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/twitter.com\/danfinlay\/status\/1257696833960214532?s=20\">because<\/a> &#8220;it seriously sometimes seems like they&#8217;re only optimized to respond to social media outrage.&#8221;<\/p>\n<p>Finlay complained that Google keeps approving extensions made by phishers. &#8220;The quantity of impostor MetaMasks on the Chrome store has been growing, and apparently they all pass the manual security review,&#8221; he <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/twitter.com\/danfinlay\/status\/1257696177736175617?s=20\">wrote<\/a>. &#8220;Furthermore, they are all allowed to buy premium Google ad space at the top of search results.&#8221;<\/p>\n<div class=\"promo_article\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/regmedia.co.uk\/2019\/10\/31\/shutterstock_phone_fraud.jpg?x=174&amp;y=115&amp;crop=1\" width=\"174\" height=\"115\" alt=\"A criminal using a phone for fraud\"><\/p>\n<h2 title=\"Bogus charges being racked up by Android tool\">40 million emoji-addicted keyboard app users left with $18m bill \u2013 after malware sneaks into Play Store yet again<\/h2>\n<p><a href=\"https:\/\/www.theregister.co.uk\/2019\/11\/01\/aitype_keyboard_malware_alert\/\"><span>READ MORE<\/span><\/a><\/div>\n<p>As we <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/www.theregister.co.uk\/2020\/01\/14\/chrome_web_store_scam\/\">reported in January<\/a>, the Chrome Web Store appears to be understaffed and over-reliant on automation to deal with the challenges it faces. In this, it&#8217;s not unlike the Google Play Store which for years has <a target=\"_blank\" href=\"https:\/\/www.theregister.co.uk\/2019\/11\/01\/aitype_keyboard_malware_alert\/\" rel=\"noopener noreferrer\">struggled<\/a> to keep malicious Android apps at bay.<\/p>\n<p><em>The Register<\/em> asked Google for comment but apart from being asked for more details about the suspect extensions, we&#8217;ve not heard back.<\/p>\n<p>Finlay told <em>The Register<\/em> that if Google wants to run the Chrome Web Store with few people, then they should implement systems to automatically enforce brand and trademark restrictions for the store and its ad platforms.<\/p>\n<p>&#8220;I think it would be great for Google to make a stance of respecting trademarks in their ads, but I\u2019m not sure if that runs counter to their business model,&#8221; he said. &#8220;I sure hope Google doesn\u2019t feel they need to protect phishing to stay afloat.&#8221;<\/p>\n<p>Google&#8217;s <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/support.google.com\/adspolicy\/answer\/6118?hl=en\">ad policy<\/a> says the company will review trademark complaints from trademark holders, but only after receiving a complaint. Google&#8217;s <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/developer.chrome.com\/webstore\/terms\">Chrome Web Store developer agreement<\/a> forbids developers from violating intellectual property rights, which probably doesn&#8217;t mean much to committed law-breakers. At the same time, it makes clear, &#8220;Google is not obligated to monitor the Products or their content.&#8221;<\/p>\n<p>Denley said Google appears to be either incapable of policing the Chrome Web Store or negligent.<\/p>\n<p>&#8220;I own a semi-popular Chrome extension and after each publish request it takes a while for it to be approved \u2013 so if there is a manual review process, either it doesn&#8217;t work as intended (and only slows down updates to popular extensions) or it&#8217;s only a manual review on popular extensions,&#8221; he said. &#8220;It seems these bad extensions are just being approved from multiple different accounts instantly.&#8221;<\/p>\n<p>A week ago, Google <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/blog.chromium.org\/2020\/04\/keeping-spam-off-chrome-web-store.html\">announced<\/a> yet more restrictions aimed at cleaning up the Chrome Web Store, noting &#8220;the increase in adoption of the extension platform has also attracted spammers and fraudsters introducing low-quality and misleading extensions in an attempt to deceive and trick our users into installing them to make a quick profit.&#8221;<\/p>\n<p>The policy revision aims to prevent developers from spamming the store with similar extensions and expands the company&#8217;s definition of abusive behavior and review manipulation. In January, Google <a target=\"_blank\" href=\"https:\/\/www.theregister.co.uk\/2020\/01\/27\/google_disables_web_store\/\" rel=\"noopener noreferrer\">locked down the Chrome Web Store<\/a> due to a flood of vitriolic comment.<\/p>\n<p>Keep in mind that Google has made similar security enhancement announcements about the Chrome Web Store every year since 2011.<\/p>\n<p>Denley said in a perfect world, owners of popular extensions would be given more attention when they report abuse, like the appearance of a similarly named and branded extension.<\/p>\n<p>&#8220;I&#8217;d love to be able to get in contact with [the Chrome Web Store] team so I can pass my IOCs [indicators of compromise] to them, though I guess cryptocurrency-related Web Store items are not their priority,&#8221; he said.<\/p>\n<p>Perhaps someone will develop a Chrome extension that re-labels Twitter&#8217;s Tweet button to read &#8220;Google Support.&#8221; \u00ae<\/p>\n<p class=\"wptl btm\"><span>Sponsored:<\/span> <a href=\"https:\/\/go.theregister.co.uk\/tl\/1925\/-8451\/build-the-next-generation-of-your-business-in-the-public-cloud?td=wptl1925\">Webcast: Build the next generation of your business in the public cloud<\/a><\/p>\n<p>READ MORE <a href=\"https:\/\/go.theregister.co.uk\/feed\/www.theregister.co.uk\/2020\/05\/06\/chrome_malicious_extensions\/\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>&#8216;Seriously sometimes seems Google&#8217;s moderators are only optimized to respond to social media outrage&#8217; Three weeks after Google removed 49 Chrome extensions from its browser&#8217;s software store for stealing crypto-wallet credentials, 11 more password-swiping add-ons have been spotted \u2013 and some are still available to download.\u2026 READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":34820,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[],"class_list":["post-34819","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-register"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Fake crypto-wallet extensions appear in Chrome Web Store once again, siphoning off victims&#039; passwords 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Fake crypto-wallet extensions appear in Chrome Web Store once again, siphoning off victims&#039; passwords 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2020-05-06T20:55:29+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/05\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"174\" \/>\n\t<meta property=\"og:image:height\" content=\"115\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Fake crypto-wallet extensions appear in Chrome Web Store once again, siphoning off victims&#8217; passwords\",\"datePublished\":\"2020-05-06T20:55:29+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords\\\/\"},\"wordCount\":766,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/05\\\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords.jpg\",\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords\\\/\",\"name\":\"Fake crypto-wallet extensions appear in Chrome Web Store once again, siphoning off victims' passwords 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/05\\\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords.jpg\",\"datePublished\":\"2020-05-06T20:55:29+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/05\\\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/05\\\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords.jpg\",\"width\":174,\"height\":115},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Fake crypto-wallet extensions appear in Chrome Web Store once again, siphoning off victims&#8217; passwords\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Fake crypto-wallet extensions appear in Chrome Web Store once again, siphoning off victims' passwords 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords\/","og_locale":"en_US","og_type":"article","og_title":"Fake crypto-wallet extensions appear in Chrome Web Store once again, siphoning off victims' passwords 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2020-05-06T20:55:29+00:00","og_image":[{"width":174,"height":115,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/05\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Fake crypto-wallet extensions appear in Chrome Web Store once again, siphoning off victims&#8217; passwords","datePublished":"2020-05-06T20:55:29+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords\/"},"wordCount":766,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/05\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords.jpg","articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords\/","url":"https:\/\/www.threatshub.org\/blog\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords\/","name":"Fake crypto-wallet extensions appear in Chrome Web Store once again, siphoning off victims' passwords 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/05\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords.jpg","datePublished":"2020-05-06T20:55:29+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/05\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/05\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords.jpg","width":174,"height":115},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/fake-crypto-wallet-extensions-appear-in-chrome-web-store-once-again-siphoning-off-victims-passwords\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Fake crypto-wallet extensions appear in Chrome Web Store once again, siphoning off victims&#8217; passwords"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/34819","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=34819"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/34819\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/34820"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=34819"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=34819"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=34819"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}