Google Chrome and Mozilla Firefox are facing serious security threats. While Chrome is being targeted through a zero-day vulnerability, Firefox users are falling victim to malicious extensions.
Malicious Firefox Extensions
On July 1, cybersecurity experts uncovered a malicious campaign involving 45 fake Firefox extensions designed to steal cryptocurrency wallet details. These extensions impersonate legitimate tools from popular platforms like Coinbase and MetaMask. Koi Security researcher Yuval Ronen reported that these extensions steal user secrets and credentials.
Surge of Crypto Hacks in 2025
In May 2025, Coinbase Global announced that hackers obtained personal information, putting over 70,000 customers at risk. Despite actions from international agencies, the number of crypto attack victims continues to rise.
Risk Mitigation Steps
To protect against malicious extensions, Koi Security recommends installing extensions only from verified publishers, treating browser extensions as full software assets, and monitoring for signs of compromise over time.
In light of rising cybersecurity threats, users should pay attention to data protection and be aware of potential risks associated with installing extensions.