Cybersecurity News

40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet Secrets

August 20, 2026

Matched: cryptocurrency

Researchers found 40 malicious Firefox extensions disguised as Web3 products like OKX and Rabby Wallet that steal cryptocurrency wallet credentials. Dubbed "Offside Wallet Theft Factory" by Socket Threat Research, the extensions are part of a broader group of 77 add-ons sharing code and infrastructure. Users are advised to verify extensions carefully before installing.

• firefox extensions
• cryptocurrency
• malware
• web3
• browser security
• wallet theft

Fake Web3 Interview Uses Signed ClickOnce to Deploy NeedleStealer and hVNC RAT

August 17, 2026

Matched: cryptocurrency

Attackers posing as Web3 recruiters on LinkedIn lured cryptocurrency professionals into fake job interviews, ultimately tricking Windows users into installing malware via a signed ClickOnce application. The infection deployed NeedleStealer, which harvested private keys and browser data, alongside an hVNC remote access trojan. The campaign used Calendly scheduling and technical assessments to appear legitimate.

• malware
• social engineering
• web3
• cryptocurrency
• rat
• clickonce