Scams
MetaMask Drainer Hidden in Fake Chrome Extension — 3,000 Wallets Emptied
Security researchers expose a malicious browser extension that mimicked MetaMask and stole seed phrases and session keys.
CyberBlackmail Intel··5 min read
A fake MetaMask Chrome extension with 12,000 downloads contained a wallet drainer that intercepted transaction signing requests. Victims who imported seed phrases lost ETH and ERC-20 tokens within minutes. The drainer used approval phishing for NFTs and leveraged Permit2 signatures to bypass standard warnings. Users are urged to install wallets only from official stores and verify extension publisher IDs.