BTC $78,914.77 +1.34%
ETH $2,483.13 +1.51%
BNB $699.60 +1.27%
XRP $1.40 +0.48%
SOL $106.52 +1.36%
TRX $0.3404 +0.66%
DOGE $0.0854 +0.32%
ADA $0.2038 +1.46%
BCH $252.67 +3.23%
LINK $11.56 +1.57%
HYPE $83.37 +0.19%
AAVE $126.28 +2.26%
SUI $0.7463 +0.17%
XLM $0.1800 +0.61%
ZEC $869.85 +4.29%
BTC $78,914.77 +1.34%
ETH $2,483.13 +1.51%
BNB $699.60 +1.27%
XRP $1.40 +0.48%
SOL $106.52 +1.36%
TRX $0.3404 +0.66%
DOGE $0.0854 +0.32%
ADA $0.2038 +1.46%
BCH $252.67 +3.23%
LINK $11.56 +1.57%
HYPE $83.37 +0.19%
AAVE $126.28 +2.26%
SUI $0.7463 +0.17%
XLM $0.1800 +0.61%
ZEC $869.85 +4.29%

fire

All
Article
Flash

first_img Socket exposes 77 malicious wallet extensions for Firefox, 40 confirmed to steal mnemonic phrases

According to a report by Decrypt, security company Socket released research results linking 77 Firefox extensions to what it calls a "wallet theft factory," with 40 confirmed to have malicious behavior.These extensions disguise themselves as Web3 products like OKX, Rabby Wallet, and TronLink, tricking users into importing wallets through fake wallet interfaces or using modified real wallet code to steal mnemonic phrases and private keys as users input them. Mozilla's signature records show that this activity lasted from March 9 to August 3, and multiple extensions were still online at the time of Socket's report.About half of the extensions displayed realistic wallet interfaces and prompted users to import existing wallets, thereby intercepting the inputted mnemonic phrases or private keys; another 13 were modified versions of Rabby that sent account data stored in wallets to external servers while functioning normally; and 5 specifically collected saved credentials and clipboard content.Additionally, 37 extensions disguised themselves as password generators, dark mode toggles, VPNs, currency converters, and note-taking tools, but actually ran sports score applications sharing the same hardcoded credentials. Nine confirmed malicious extensions were initially released as score applications for sports like football and basketball, with subsequent updates replacing them with wallet theft code.Socket named this activity the "wallet theft factory," but cautioned that it has not confirmed whether all extensions are controlled by the same operator. The Socket team stated that any user who has entered mnemonic phrases or private keys into these extensions should consider it a "permanent leak" and immediately transfer funds to a new wallet, as uninstalling the extensions cannot undo the mnemonic phrases sent elsewhere.

hot_img Counterpoint: If the United States bans imports of Chinese optical modules, it will backfire on domestic cloud vendors rather than just Chinese suppliers

According to Counterpoint Research analysis, if the proposed import ban on Chinese optical modules by the Federal Communications Commission (FCC) in the United States is implemented, it will primarily impact American cloud providers rather than Chinese suppliers. InnoLight leads the global data center optical module revenue with approximately 27% market share, while Coherent ranks second with about 17%. Chinese manufacturers collectively account for about two-thirds of the global unit supply and approximately 60% of the optical communication module revenue.The analysis points out that Western suppliers like Coherent and Lumentum lack sufficient cleanroom capacity, automated packaging infrastructure, and yield scale in the short term, making it impossible to fill the capacity gap left by Chinese manufacturers within 12-24 months. This could lead to delays in AI cluster deployments by several quarters and increase material costs for cloud providers. At the same time, Chinese module manufacturers rely on high-end 800G/1.6T module revenue from North American hyperscale customers for over 90%, but have achieved partial capacity relocation by establishing factories in Thailand.Counterpoint emphasizes that the optical module supply chain is a highly interdependent system. Chinese manufacturers heavily procure DSP chips from Broadcom and Marvell, as well as lasers and optical chips from Lumentum, Coherent, and Mitsubishi Electric. A forced separation would disrupt the entire ecosystem.
app_icon
ChainCatcher Building the Web3 world with innovations.