malware
Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses
High
Summary
A new browser extension campaign, dubbed Silent Swap by McAfee Labs, is targeting cryptocurrency users by stealthily replacing wallet addresses during transactions. The malicious extension, disguised as a Google Notes utility, intercepts clipboard data and reroutes funds to attacker-controlled wallets. This campaign utilizes techniques like EtherHiding and dynamic wallet substitution to evade detection and maintain persistence, with a global distribution of infections, notably concentrated in India.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data