A malicious “Safery: Ethereum Wallet” extension is currently live on the Chrome Web Store, using a crafty backdoor to exfiltrate seed phrases. Here’s how it works.
Blockchain security platform Socket has warned of a new malicious crypto wallet extension on Google’s Chrome Web Store that has a unique way of stealing seed phrases to drain user assets.
The extension is called “Safery: Ethereum Wallet” and claims itself as a “reliable and secure browser extension designed for easy and efficient management” of Ethereum-based assets.
However, as highlighted in a Tuesday report from Socket, the extension is actually designed to steal seed phrases via a crafty backdoor.
