WuShuo has learned that the security research organization Socket has discovered 19 malicious browser extensions, including 18 Chrome extensions and 1 Edge extension, capable of delivering malicious modules via remote C2 to steal private information from crypto wallets, mnemonic phrases, exchange login credentials, and browser data, as well as executing wallet asset theft. These extensions typically build a user base with normal functionality first, then introduce malicious code through updates. Among them, 5 were acquired by attackers from the original developers and then implanted with malicious features. The most widespread extension, 'Enable Right Click & Copy — Smart Unlock + OCR,' has approximately 80,000 users combined on Chrome and Edge. Its Chrome version has been removed, but as of Socket's report, the Edge version was still distributing malicious code. Socket has tracked this activity as the 'Superior' attack campaign, with related activities dating back as early as February 2024. https://(wublock123.com)/news/socket-finds-19-malicious-chrome-edge-extensions-steal-wallet-credentials-67427