Fake Firefox Extensions Steal Crypto Wallet Recovery Phrases

Published: 29 Oct 2026 · Worldwide

Malicious Firefox extensions impersonating popular crypto wallets like Phantom, Jupiter, and Bitget have been used to steal users' recovery phrases and private keys. Users should be cautious when installing browser extensions related to cryptocurrency wallets.

Who is at risk

Cryptocurrency wallet users on Firefox browsers

How to protect yourself

• Only install extensions from official sources and verified developers
• Avoid entering recovery phrases or private keys into browser extensions
• Regularly review and remove suspicious or unused browser extensions

Source: Malwarebytes Labs (malwarebytes.com)

Language: English Ελληνικά Español Français Deutsch Italiano Português Nederlands Polski Türkçe Русский العربية हिन्दी 中文 日本語

🔔 Scam alerts

Check a suspicious message now →

All latest scams →