API
< Back to situations

[ORGANIZATION]

Socket.dev

Featured in 1 tracked story · first seen

Situations

[ACTIVE] [TECHNOLOGY] [FR]

Malicious Firefox extensions targeting cryptocurrency

2 clusters · 2 sources · last updated

Latest: Firefox Add-ons Store targeted by malicious crypto-stealing extensions

Cybersecurity researchers have identified ongoing campaigns involving malicious Firefox extensions designed to steal cryptocurrency credentials. In early October 2026, Mozilla removed 16 extensions that targeted Rabby