SecurityThe Hacker Newsabout 2 hours ago
16 Malicious Firefox Extensions Steal Keys
4 min read
Cybersecurity researchers discovered 16 malicious Mozilla Firefox extensions posing as Rabby and OKX wallets to steal recovery phrases. As of October 5, 2026, all extensions were removed. Four clones mimic Rabby Wallet while others target OKX, contacting the icy-star-f45c.workers[.]dev domain to exfiltrate secrets to attacker-controlled Cloudflare Workers.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyMozilla