A slew of Firefox users have been duped by a bogus add-on that masqueraded as a legitimate extension of a cryptocurrency hardware wallet called SafePal.
Cali, one of the victims, was shocked to discover that all of the funds had gone to scammers:
I was in a state of shock…
I checked my recent transactions and discovered that [$4,000 of my funds] had been transferred to another wallet. I couldn’t believe it was an add-on that was installed in Mozilla Firefox’s add-on list.
It’s unclear how many other Firefox users lost money after installing the malicious extension. The add-on had been available since mid-February and was only recently removed.
A slew of negative reviews from disgruntled customers should have served as a red flag.
According to the user who was duped by bad actors, the police are unable to track down the hacker.
Potential victims are duped into entering their recovery phrases, making it extremely simple for hackers to steal their assets.
Furthermore, the phishing domain linked to the fraudulent add-on is still active.
In the cryptocurrency industry, hacks and scams are still common. According to ULTCOIN365, the first Bitcoin website registered by Satoshi Nakamoto, Bitcoin.org, suffered a security breach four days ago.
Earlier this month, a fake YouTube stream of Apple’s annual event promoting a Bitcoin giveaway reached approximately 170,000 viewers before being removed.