Cryptocurrency Wallet

A widespread cybercriminal campaign is actively targeting Mozilla Firefox users with more than 40 fake browser extensions designed to steal cryptocurrency wallet credentials, with the most recent extensions being uploaded just last week.

Hackers have uploaded at least 40 fake crypto wallet extensions to the Firefox store, tricking users into giving up their wallet details. Some of the apps copied real wallets like MetaMask and Trust Wallet, and have already caused users to lose funds.

Ledger has launched a new offline backup tool called the Recovery Key, which helps users regain access to their wallets without using the internet or cloud services. It works by tapping a smart card to a Ledger device and entering a PIN, offering a more private way to recover crypto access.

Hackers used Trezor’s support form to send fake emails that looked like official messages, tricking users into revealing their wallet backups. Trezor confirmed its systems weren’t breached and warned users never to share their recovery phrases.

A scammer posed as Coinbase support and tricked over 30 users into transferring a total of $4 million in crypto to fake wallets. The fraud was carried out through phone calls and Discord chats, with funds later traced to gambling sites and linked to a man named Christian Nieves.

Cointelegraph and CoinMarketCap were hacked through front-end attacks that showed fake airdrop pop-ups to steal users’ crypto. The scams tricked visitors into connecting wallets, letting attackers drain funds using hidden malicious code.

A Japanese crypto influencer was hacked after joining a deepfake Zoom call where a fake friend sent her a malicious link. Her Telegram and Metamask accounts were breached, leading to the theft of her crypto assets.

A North Korean hacker group called Famous Chollima has been tricking crypto job seekers in India into installing malware through fake job ads. Victims were asked to run commands that secretly installed software to steal passwords, browser data, and crypto wallet access.

Israeli-linked hacker group Gonjeshke Darande (Predatory Sparrow) claimed responsibility for the $100 million hack of Iranian crypto exchange Nobitex. The exchange confirmed a "security incident," saying only hot wallets were affected. The hackers accused Nobitex of helping Iran evade sanctions.

Hella received a call in the middle of the night that gave her the chills. Over the phone, Hella's friend sobbingly told her how she had bought a cold wallet for a discounted price through the Chinese social media app Douyin.