Title: Trezor fake Chrome extension Post by: TravelMug on March 28, 2020, 01:05:48 AM Last week I created this thread: Ledger Live fake Chrome extensions (https://bitcointalk.org/index.php?topic=5234767.0), and some of them have been taken down already. However, scammers shifted their attention to Trezor now (same bad actors), and has been downloaded 33 times already. So someone has fallen for the trick already.
Extensions: Code: https://chrome.google.com/webstore/detail/trezor/dkhcmjfipgoapjamnngolidbcakpdhgf Archive: http://web.archive.org/save/https://chrome.google.com/webstore/detail/trezor/dkhcmjfipgoapjamnngolidbcakpdhgf Looking closely at the code, once you enter you seed or mnemonic phrase it will be posted to: Code: https://docs.google.com/forms/d/e/1FAIpQLSc1DTYAqXYnGTaUH0AIJa-rC2lk7V5nsE6tEdGIKXTKNm36HQ Snippet of the actual code, Index.html Code: <div class="wrapper"> and manifest.json Code: { I'm expecting more Trezor chrome extension to pop up in the next coming days, I will keep this thread updated if I find more and everyone should be careful. Title: Re: Trezor fake Chrome extension Post by: tbct_mt2 on March 28, 2020, 02:24:15 AM People tend to create opportunities to steal their money by being too lazy. I don't mention about Trezor Chrome extension but I would like to expand the warning more widely. If one has been in crypto for too long, they would have known that there are many phishing attacks, and fake extensions (fake extensions of Myetherwallet for instance).
Moreover, bookmark can not protect people completely if their computers are infected with hazardous threats. Stay being careful with any extentions, not relying on any tools and stay safe in crypto. |