77 Firefox Extensions Linked to Crypto Wallet and Credential Theft

Reported 20 Aug 2026 by otx · Severity: medium

Socket identified a coordinated campaign involving 77 Firefox extensions designed to steal cryptocurrency wallet secrets and credentials. The operation, tracked as 'Offside Wallet Theft Factory', includes 40 confirmed malicious extensions that exfiltrate recovery phrases, private