GreedyBear Steals $1M in Crypto Using 150+ Malicious Firefox Wallet Extensions
August 8, 2025
1 min read
●
The Hacker News

A newly discovered campaign dubbed GreedyBear has leveraged over 150 malicious extensions to the Firefox marketplace. The published browser add-ons masquerade as MetaMask, TronLink, Exodus, and Rabby Wallet, among others.