Analyst: Security research found 19 malicious browsers extended to steal encrypted information

Wu stated that it was informed that the security research institute Socket had discovered 19 malicious browser extensions, including 18 Crome and 1 Edge extension, which could be carried out by sending out a malicious module from remote C2, stealing encrypted wallet secret information, notes, exchange login documents and browser data, and implementing wallet asset theft. The extension is usually based on normal functionality, followed by an updated malicious code, of which five were acquired by the attackers from their original developers and implanted in malicious functions. “enable right click & copy — smart unlock + ocr” with the largest impact, together with Edge, about 80,000 users have their Chrome version on board, but the Edge version is still distributing malicious codes at the time Socket sends it. Socket traced the activity to the “suberior” attack, as early as February 2024。