Browser extensions can steal bitcoin

[tabas]

Aside browser extensions, some malicious keyboards can steal your private keys or mnemonic phrases. So my advise is, do not install 3rd party keyboards at all.

Yeah right. There are malicious software that are also injecting malware into your computer, AFAIK it's not literally that it will search for your private keys or phrases but it's like a keylogger that everything you copy will be saved to their database. I don't know the full cycle of how they steal it but as a user, we should consider the need of being aware of this kind of stealing.
Don't download untrusted sources because those kind of malware mainly comes from those.

[AjithBtc]

I have read an article and experienced by my own friend because installing some extensions in their browser, the extension owner can be used to steal passwords owned by the computer owner, it's better when you have to be careful when you want to install extensions.

There are chances to get evaded through extensions. It is always good to go with trusted extensions and never install unwanted extensions. In an article read about people using free VPN services to stay anonymous, while doing so users go through the VPN and enter all the personal passwords for the wallet. This is been stored by the VPN network and funds were stolen. So always good to use trusted extensions as well other services.

[herurist]

I have read an article and experienced by my own friend because installing some extensions in their browser, the extension owner can be used to steal passwords owned by the computer owner, it's better when you have to be careful when you want to install extensions.

That's what I'm afraid of, I've never installed any extensions for fear that things that happen are better stored in documents that are safer than browser extensions.

[dongosquad]

I have read an article and experienced by my own friend because installing some extensions in their browser, the extension owner can be used to steal passwords owned by the computer owner, it's better when you have to be careful when you want to install extensions.

Really? it's very dangerous. Third-party applications always ask for access to explore your account. It is very important for us to read the instructions displayed, choose wisely. Things to consider before giving access are: how secure the application or extension is and what account data is requested. Always be careful with your clicks.

[Polar91]

I have read an article and experienced by my own friend because installing some extensions in their browser, the extension owner can be used to steal passwords owned by the computer owner, it's better when you have to be careful when you want to install extensions.

Really? it's very dangerous. Third-party applications always ask for access to explore your account. It is very important for us to read the instructions displayed, choose wisely. Things to consider before giving access are: how secure the application or extension is and what account data is requested. Always be careful with your clicks.

It's still best to choose which extensions we should download and install for our browser. There are a lot or things that extentions can do that's why it should be taken seriously. There are times that some users doesn't notice it that's why their wallet should be either encrypted or stored to a cold wallet.

[betty11]

I have always known we have phishing extensions. Last year some persons got their hydro stolen and other assets because of phishing browser extension. My question is are are these: Will my original added metamask extension also turn to stealing my coins? I have real Myetherwallet, folkdelta and metamask extension. The site are well spelt and have been using them for years now, hope this poses no threat?

[VDraci]

I have read an article and experienced by my own friend because installing some extensions in their browser, the extension owner can be used to steal passwords owned by the computer owner, it's better when you have to be careful when you want to install extensions.

Or its better not to use browser extensions at all, doing so won't  hurt at all and if its a must all browser extensions always have standalone official software that you can download from official websites, finding its right source is not hard at all

[Inu.Guren]

~

My guess, they cannot if you encrypt the wallet? Or they can do it even with an encrypted wallet?

i don't think so, if sometime we tried to open our wallet, for example Myetherwallet, when we trying to open our wallet from the site, we must choose (usually) json file or private key, i think they can read the decrypt key from this site and send the code to owner from this extension, like keylogger but with another improvement for read the decrypt key directly from our browser

[leea-1334]

If extensions are scammy then it will be just the same as visiting scam website directly and telling the scam to come and steal our fund or we give them the right to install spy ware on our laptop that will make the scammer be able to monitor our cryptocurrency account and then steal our fund.

We really need to be very careful of the extension that we install, not all extension are actually bad, we just have to make sure that we follow extension from companies that are very reliable and not just the ones that we see verified, because even the verified ones will never tell the story that they have such thing, because it is very difficult to trace an extension to malware, so the only way to avoid it is either we don’t install the software at all or we extremely ensure that the company is a reliable one.

Not all extensions are scammy, some just have some weak coding and vulnerability that is not discovered by their own developers. And then when the hackers find it they can exploit it,,, and users are the unknowing victim until the hack becomes public.

One way to prevent this is to make your extension open source.

[tetyulfania]

be quit with browser extension on your computer, always check first before you installing your extension on your browser, I found many fake extension always show up on my browser.

[MikeyVeez]

Everything what you have installed in your computer can be infected by a computer virus, keep it in your mind.
That is why hardware wallets are recommended because no one is able to see your private key.

[coinsycrip09]

It can certainly happen if you use a bad extension. They can steal everything on your computer if you provide access to the extension. Be careful when installing extensions if you don't want to lose all your money

this is scary, now more and more ways for someone to steal money in our wallets without us knowing.
it seems i should be more careful when visiting or using anything on my computer.

i think i should thank the OP for giving me an early warning.

[akungagal]

wow, it looks like thieves are getting smarter now.
now they find other ways to benefit in their pockets, it seems we have to be more vigilant in using anything or visiting anything through our computer.

now i have to pay close attention to everything so that there is no chance for them to infiltrate my computer.

[beliomir]

I believe that the fewer applications and extensions on the device the safer. But if you install extensions and applications, then be sure to check them out.

[timmmers]

If I imagine that also MetaMask could be hijacked then it is pretty normal to be paranoid.
In cryptocurrencies you are responsible for your funds, if you do one mistake, you can loose everything, it is very important to know that there is no way how to get your stolen funds back  .

[Ararbermas]

Probably there's a possibility if you use a fake extension to your browser, wherein made only to hack information.  Indeed mostly project nowadays using metamask extension and on this case there's  a high chance they can steal our private information easily in my opinion  , so we must be aware using that as well .make sure that the project were trusted to assure it's  safe to use because you know it's hard to determine easily because of copy pasting designed and etc.  

[fortunecrypto]

Its been a long time since ive knew that browser extensions are bad news and in fact they should consider red flags, you can easily get viruses on your pc or even spyware but the latest news about these so called browser extensions is they can be used to steal your coins, consider this a warning for those who use chrome and mozilla firefox browser extensions regularly. I came across the warning while surfing the internet today.

Browser extensions can help scammers steal your crypto Casa CEO Jeremy Welch warned the audience at the Baltic Honeybadger conference in Riga this weekend.

Sorry i couldn't drop link to the full news because i got the warning news from pivot news which would require you to download app before reading any news, share this warning with friends and crypto fans especially newbies

I love to read that article to see how reliable is the news, I'm using a lot of extensions, and so far I'm safe but these extensions are popular extensions in the market and they are verified extensions, people should only worry if they downloaded it in a third party because they are not verified from Google extensions.

[CoinThinker]

It is best to never install any extension or application on your computer. Because your money can be stolen at any time, always be careful if you don't want to cry and regret

[r_delossa]

Especially, when you are installing some fraud extensions that are offered from scammers. I got a telegram DM several months ago, where a guy promised to multiply my earnings, just by installing a chrome extension.

[tabas]

Aside browser extensions, some malicious keyboards can steal your private keys or mnemonic phrases. So my advise is, do not install 3rd party keyboards at all.

Yeah right. There are malicious software that are also injecting malware into your computer, AFAIK it's not literally that it will search for your private keys or phrases but it's like a keylogger that everything you copy will be saved to their database. I don't know the full cycle of how they steal it but as a user, we should consider the need of being aware of this kind of stealing.
Don't download untrusted sources because those kind of malware mainly comes from those.

I guess by the "malicious keyboards" you mean "BadUSB" which basically is a modified USB drive (even an chinese 1$ ATtiny85 development board can be used for that purpose) - that is detected as a keyboard and can be used, for example, to download malware by simply plugging it into the USB port (which requires physical access to the device).

Oh, so this kind of keyboard is on the market? I thought these malicious keyboard stuffs were all just malicious software.