Fake OKX plugins found on the Firefox browser store

The cryptocurrency exchange, OKX, has alerted its users about fake OKX browser extensions that have popped up in the Firefox browser’s add-on marketplace. These extensions allow for third-party functions to be integrated within a web browser.

As a researcher, I’ve discovered that OKX, the firm I’m referring to, has no affiliation with the development of Firefox browser plugins. Unfortunately, some users may have inadvertently downloaded a plugin attributed to OKX. For those affected, I recommend transferring any funds from wallets linked to this misleading extension as soon as possible, following the advice provided by OKX.

OKX reached out to Firefox asking them to delete the related apps, and also warned users against downloading any OKX software from external sources.

Dangerous web browser add-ons may be employed to swipe confidential data and financial resources. In 2024, phishing traps accounted for a significant portion of cryptocurrency losses, as reported by CertiK.

Bad browser plugins can take your personal information and money. Phishing scams were responsible for a lot of people losing their crypto in 2024, according to CertiK.

User beware: Phishing is increasingly sophisticated

Recently, CertiK has released “Hack3d: The Web3 Security Annual Report 2024” – detailing the major cybersecurity risks to digital assets that are expected to emerge in the year 2024.

Based on the findings of the report, phishing incidents across 296 separate attacks drained crypto users of more than $1 billion collectively in 2024 – marking a 21% rise compared to losses sustained in 2023.

In September 2024, specialists from McAfee’s cybersecurity team uncovered a type of harmful software, named SpyAgent, that was targeting Android mobile devices.

A cybersecurity company found more than 280 fake apps on Android that were actually hiding harmful software, but they appeared to be harmless at first glance.

SpyAgent employs Optical Character Recognition (OCR) technology to scrutinize pictures saved within a device’s storage, and it identifies confidential details like secret cryptocurrency access keys hidden within those images.

Additionally, the researchers noted that the malware propagated via text message links encouraging users to install harmful apps. This tactic enabled the con artists to bypass the safety measures built into Google’s app marketplace.

On September 19, 2024, the Decentraland platform, which is a 3-dimensional virtual universe constructed on the Ethereum blockchain, experienced an unauthorized intrusion into one of its social media accounts.

In simpler terms, some unauthorized users exploited a vulnerable webpage to disseminate fraudulent phishing links among their audience, and they also falsely announced an imaginary MANA token giveaway (the digital currency associated with Decentraland).

Users who followed the link for the airdrop event and linked their digital wallets may have unknowingly had their assets compromised by malicious software.

Read More

2025-01-09 02:25