Socket uncovers malicious Firefox extensions spoofing Phantom, Jupiter, and Bitget. These malicious Firefox wallet extensions steal seed phrases.

Related Posts:

• Yoba Malware Campaign Sideloads Payloads Through Signed OpenAI and Anthropic Binaries
• Fake FedEx Tax Invoice PDFs Deliver Fileless Sirius Backdoor to Windows Systems
• Brazilian Magecart Group Hits Convertr Ecommerce Platform in Plausible Analytics Supply Chain Attack

The post Fake Phantom, Jupiter, and Bitget Firefox Extensions Steal Crypto Recovery Phrases appeared first on Daily CyberSecurity.

60 OffiDocs Chrome extensions with 2.3M installs secretly send browsing URLs. See how these spying Chrome extensions work and how to stay safe.

Related Posts:

• Keystone Wallet Data Breach Exposes Customer Orders
• PingCAP Data Breach Exposes TiDB Cloud Customer Records and Source Code
• Smart TV ACR Tracking Study Finds Failed Opt-Outs and 57 Million Exposed Viewing Records

The post OffiDocs Chrome Extensions With 2.3 Million Installs Caught Harvesting Browsing URLs appeared first on Daily CyberSecurity.

Socket found 16 malicious Firefox extensions posing as Rabby and OKX. These crypto wallet stealers grabbed seed phrases. Here is what to do.

Related Posts:

• The Silent Threat of Midnight Mimosa Malware
• Phishing Campaign Abuses Microsoft Power BI to Install Rogue ScreenConnect Clients
• Rogue AI Agents Hijacked urlquery Scan Browsers to Reach Russian Bankruptcy Records

The post 16 Fake Rabby and OKX Firefox Extensions Stole Crypto Wallet Recovery Phrases appeared first on Daily CyberSecurity.

Socket links GlassWorm VS Code themes to malicious VS Code extensions with 8,000+ installs, including a Coca-Cola theme. See how to check yours.

Related Posts:

• Moroccan Intelligence Deploys Vast Surveillance Panopticon
• DragonForce Backdoor Adds MQTT Fallback to Microsoft Teams TURN Command Channel
• New 2CLoader Malware Delivers Vidar and Remus Infostealers While Dodging Sandboxes

The post Socket Links Popular VS Code Color Themes to the GlassWorm Supply Chain Campaign appeared first on Daily CyberSecurity.

A Chrome extension popup freeze bug on macOS delays 1Password and other extensions by minutes. Google has flagged it high priority but has no fix yet.

Related Posts:

• Apple Introduces the iOS 27 Auto Lock Feature
• Trump Mandates Super Intelligence to Replace AI Terminology
• iPhone 18 Pro Face ID Failures Trigger System Restarts

The post Chrome Extension Popups Freeze for macOS Users appeared first on Daily CyberSecurity.

Learn how Brazilian KREMLIN banking malware steals credentials using fake browser extensions. Elastic Security Labs details the KREMLIN banking malware.

Related Posts:

• LLM-Generated PhantomRaven Information Stealer Discovered
• Mantax Otax Android Malware: Spyware Meets Ransomware
• SloppyRAT Malware Analyzed in Ransomware Attacks

The post KREMLIN Banking Malware Targets Brazilian Banks appeared first on Daily CyberSecurity.