A Google Chrome browser extension tricking users into participating in a fake airdrop from cryptocurrency exchange Huobi claimed over 200 victims, a security researcher reported in a blog post on March 14.
The extension for Chrome web browser, with the name NoCoin, gained 230 downloads before Google deleted it, according to Harry Denley, who runs cryptocurrency scam database EtherscamDB. Denley noted that hackers had purposely disguised the malicious extension to look like a tool protecting users from cryptocurrency malware or so-called cryptojacking.
Behind the facade it became apparent the extension requests the input of private keys from popular wallet interfaces MyEtherWallet and Blockchain.com.
Private keys are then sent to hackers, who can empty wallets of holdings.
The extension lay at the end of a fake giveaway campaign, ostensibly from crypto exchange Huobi, which offered worthless ERC20 Ethereum network-based tokens to unwitting consumers.
It is unknown how long the extension remained available for Google Chrome users.
As Cointelegraph continues to report, bad actors targeting cryptocurrency users have sought increasingly nefarious methods of tricking novices into handing over access to funds.
Just this week, a report identified cryptojacking as a sign of increasingly discreet behavior among hackers.
Google itself has come under fire for its own apparent lack of diligence in the past, in February pulling a fake version of popular decentralized app MetaMask from its Play store.
As Cointelegraph reported last month, users of cryptocurrency wallets Electrum and MEW were also facing phishing attacks, according to posts published on Reddit and Twitter.
Google Deletes Crypto Malware Targeting Blockchain.com, MyEtherWallet Users
Published on Mar 15, 2019
by Cointele | Published on Coinage
Louis Vuitton Owner LVMH Is Launching a Blockchain to Track Luxury Goods
Luxury brand conglomerate LVMH, owner of the iconic Louis Vuitton label, is preparing to launch a blockchain for proving the authenticity of high-priced goods, CoinDesk has learned.
TrueUSD Stablecoin Holders Can Get 'Up to 8%' Interest Via CredEarn
Holders of the dollar-pegged stablecoin TrueUSD can now leverage their funds to generate returns under a new partnership between the token's developer TrustToken and crypto lender Cred.
Binance Tightens Compliance, Turning to IdentityMind for KYC
The world's largest cryptocurrency exchange Binance is moving to boost compliance and data security through a new deal with Medici Ventures portfolio firm IdentityMind.
E-Commerce Giant Rakuten Wins License for New Crypto Exchange
Japan's top financial watchdog has granted a license to a cryptocurrency exchange being relaunched by e-commerce giant Rakuten.