OKX Warns of Fraudulent Firefox Extensions, Users Advised to Secure Wallets

OKX, a popular cryptocurrency exchange, has issued a warning regarding fraudulent browser extensions that have appeared in the Firefox plugin store.

These extensions, which integrate third-party functionalities into web browsers, are not affiliated with OKX. The company clarified that it has not released any Firefox plugins and advised users who may have unknowingly downloaded these extensions to immediately transfer any funds from wallets linked to them.

OKX has taken action by notifying Firefox to remove the fraudulent extensions and reminded users to avoid downloading any OKX-related software from third-party sources.

Malicious browser extensions, which can steal sensitive data and funds, have become a growing concern in the crypto community. According to CertiK’s “Hack3d: The Web3 Security Report 2024,” phishing scams were among the leading causes of crypto losses, with over $1 billion in losses across 296 campaigns in 2024. This marked a 21% increase from the previous year.

In addition to phishing, cybersecurity threats have become more sophisticated. In September 2024, McAfee researchers identified a malware called SpyAgent, affecting Android devices. Disguised as legitimate apps, SpyAgent used optical character recognition (OCR) to scan and extract sensitive information, such as cryptocurrency private keys, from stored images. The malware spread through text message links, bypassing Google’s app store security.

Meanwhile, Decentraland, a virtual reality platform on the Ethereum network, faced a breach on its X social media page. Hackers used the compromised account to distribute phishing links and promoted a fake MANA token airdrop, tricking users into connecting their wallets and draining their funds. This highlights the growing risk of phishing and malware in the Web3 space.