Archynetys Live news trend intelligence
↑ Rising Technology

19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto-Draining Code

A coordinated wave of malicious browser extensions is actively stealing crypto wallets across Chrome, Edge and Firefox.

By · Published August 29, 2026 at 21:37 UTC · Updated August 29, 2026 at 22:24 UTC

6sources
6articles
4velocity
+31%since first seen
13h agofirst detected

Evidence dossier

Intelligence passport

62/100 Strong
6distinct sources shown
14velocity measurements
1language editions checked
Unsupported statements were removed before publicationbrief evidence status

Measured timeline

  1. Detected The first matching coverage entered the Archynetys cluster.
  2. Evidence threshold reached The story had enough independent coverage for an explanatory brief.
  3. Latest coverage observed Most recent article currently attached to this story cluster.
  4. Peak measured velocity The recorded velocity reached 4.

Source diversity sample: CryptoSlate · Bitcoin World · Yahoo Tech · Coin Gabbar · Bitdefender · The Hacker News.

How this dossier is built: methodology · AI policy · corrections.

Velocity

How fast coverage is spreading — measured hourly from article rate × source diversity. How this works →

What happened

Security researchers disclosed that 19 browser extensions for Chrome and Microsoft Edge contain code that can drain crypto wallets, as first reported by The Hacker News. The report marks the first public identification of this specific group of malicious extensions across the two browsers. Subsequent coverage expanded the scope to Firefox.

Yahoo Tech detailed 40 counterfeit Firefox crypto‑wallet extensions that harvest user secrets, while Bitdefender confirmed that malicious Firefox add‑ons are siphoning seed phrases and browser credentials. Bitcoin World added practical advice for users to audit installed extensions and revoke compromised permissions. Together the outlets illustrate a broader ecosystem of wallet‑stealing plug‑ins affecting all major browsers.

The count of fraudulent Firefox extensions differs between outlets: Yahoo Tech cites 40 fake add‑ons, whereas Bitdefender does not disclose a specific number, creating a mismatch in reported breadth. All sources agree the extensions are active and capable of draining funds. At present, security firms recommend immediate removal of the identified Chrome, Edge and Firefox extensions and monitoring of wallet activity, pending any further remediation updates.

Synthesized by Archynetys from the headlines below under a strict no-invention contract. ✓ fact-checked: unsupported claims removed (90% supported) Updated 1h ago.

The reporting (6)

Questions people are asking

Which browsers are affected by the newly identified malicious extensions?

Chrome, Edge and Firefox have extensions flagged for wallet‑stealing behavior.

How many fraudulent extensions have been reported for each browser?

Nineteen Chrome and Edge extensions were identified; Yahoo Tech reported forty fake Firefox extensions, while Bitdefender confirmed additional malicious Firefox add‑ons without stating a count.

What immediate steps are recommended for users?

Remove the identified extensions, revoke any granted permissions, and monitor cryptocurrency wallets for unauthorized activity, according to the guidance issued by the reporting outlets.

Topics

Chrome Edge Firefox crypto wallet malware

From around our network

Related trends

Open prediction lab

Can you beat the machine?

Pick tomorrow's top trend, then compare your result with Archynetys's self-graded forecast.

Make a prediction →