Crypto users were left vulnerable after a harmful Google Chrome extension was discovered, designed to steal funds by manipulating website cookie data. Binance trader “doomxbt” first noticed the issue in February 2024, after losing $70,000 due to suspicious activity.
The culprit was traced to a fake Aggr app extension on the Chrome store, which collected all website cookies from users. This allowed hackers to reconstruct passwords and user keys, particularly targeting Binance accounts. The fake extension was promoted by influencers, raising concerns about due diligence in the crypto community.
This incident is part of a larger trend, with similar attacks using Chrome extensions reported recently. Last month, a trader lost over $800,000 through malicious extensions. Users are advised to “do your own research” (DYOR) and thoroughly check applications before downloading.
Such incidents highlight the critical need for better security measures and awareness in the crypto space, ensuring user protection against increasingly sophisticated cyber threats.
