thunderforce avatar

Security Alert: Chrome Extension Stealing Cryptocurrency Keys and Passwords

thunderforce

Published: 20 Jan 2020 › Updated: 20 Jan 2020Security Alert: Chrome Extension Stealing Cryptocurrency Keys and Passwords

Security Alert: Chrome Extension Stealing Cryptocurrency Keys and Passwords

Security Alert: Chrome Extension Stealing Cryptocurrency Keys and Passwords

Security expert Bruce Schneier reports: A malicious Chrome extension surreptitiously steals Ethereum keys and passwords:

According to Denley, the extension is dangerous to users in two ways. First, any funds (ETH coins and ERC0-based tokens) managed directly inside the extension are at risk.

Denley says that the extension sends the private keys of all wallets created or managed through its interface to a third-party website located at erc20wallet[.]tk.

Second, the extension also actively injects malicious JavaScript code when users navigate to five well-known and popular cryptocurrency management platforms. This code steals login credentials and private keys, data that it's sent to the same erc20wallet tk third-party website.

https://www.zdnet.com/article/chrome-extension-caught-stealing-crypto-wallet-private-keys/


Originally posted on Thunderforce BR. Steem blog powered by ENGRAVE.

Leave Security Alert: Chrome Extension Stealing Cryptocurrency Keys and Passwords to:

Written by

Read more #engrave posts


Best Posts From thunderforce

We have not curated any of thunderforce's posts yet. But you can encourage our curation team to review posts by visiting them regularly and by referring other readers. Because we give priority to frequently read content.

More Posts From thunderforce