Bitcoin Forum
May 13, 2024, 03:28:36 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: [Scam] Safepal wallet Malicious Firefox add-on  (Read 99 times)
notblox1 (OP)
Legendary
*
Offline Offline

Activity: 2058
Merit: 1264


Logo Designer ⛨ BSFL Division1


View Profile WWW
October 21, 2021, 05:58:27 PM
Last edit: October 21, 2021, 07:22:10 PM by notblox1
Merited by The Cryptovator (5), hugeblack (4), Bitcoin_Arena (1), Symmetrick (1)
 #1

What Happened: This is fake and malicious Safepal wallet add-on for Firefox browser that was available on Mozilla store website since February 2021 and it was collecting recovery phrase using safeuslife phishing website.
Mozilla removed this add-on after reports from many people but it is possible that scammers will release something similar again.

Code:
website: https://addons.mozilla.org/nl/firefox/addon/safepal-wallet/
support site: https://safeuslife.com/tool/
archive: https://archive.md/yN7TN



Quote
Domain name: safeuslife.com
Registry Domain ID: 2585854915_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 0001-01-01T00:00:00.00Z
Creation Date: 2021-01-19T21:55:54.00Z
Registrar Registration Expiration Date: 2022-01-19T21:55:54.00Z
Registrar: NAMECHEAP INC

There is no Safepal extension for any browser Chrome or Firefox!

██
██
██
██
██
██
██
██
██
██
██
██
██
... LIVECASINO.io    Play Live Games with up to 20% cashback!...██
██
██
██
██
██
██
██
██
██
██
██
██
1715614116
Hero Member
*
Offline Offline

Posts: 1715614116

View Profile Personal Message (Offline)

Ignore
1715614116
Reply with quote  #2

1715614116
Report to moderator
Make sure you back up your wallet regularly! Unlike a bank account, nobody can help you if you lose access to your BTC.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1715614116
Hero Member
*
Offline Offline

Posts: 1715614116

View Profile Personal Message (Offline)

Ignore
1715614116
Reply with quote  #2

1715614116
Report to moderator
1715614116
Hero Member
*
Offline Offline

Posts: 1715614116

View Profile Personal Message (Offline)

Ignore
1715614116
Reply with quote  #2

1715614116
Report to moderator
shasan
Copper Member
Legendary
*
Offline Offline

Activity: 2198
Merit: 1272

Need a Bounty Manager? t.me/shasan32


View Profile WWW
October 21, 2021, 06:53:33 PM
 #2

Code:
website: https://addons.mozilla.org/nl/firefox/addon/safepal-wallet/
support site: https://safeuslife.com/tool/
I have tried to open both the website as well as mozila addons but I could not open anything I think there is something wrong on the link or they are broken. Also, as the addons has already been removed, it is not helpful for us. Also, how you could see it after the deleting addons by mozila?
notblox1 (OP)
Legendary
*
Offline Offline

Activity: 2058
Merit: 1264


Logo Designer ⛨ BSFL Division1


View Profile WWW
October 21, 2021, 07:06:20 PM
 #3

I have tried to open both the website as well as mozila addons but I could not open anything I think there is something wrong on the link or they are broken. Also, as the addons has already been removed, it is not helpful for us. Also, how you could see it after the deleting addons by mozila?
Also, also, I said that Mozilla removed it but scammers may upload it again so it can help some people, and I could not post about this earlier than today:
https://www.bleepingcomputer.com/news/security/malicious-safepal-wallet-firefox-add-on-stole-cryptocurrency/


██
██
██
██
██
██
██
██
██
██
██
██
██
... LIVECASINO.io    Play Live Games with up to 20% cashback!...██
██
██
██
██
██
██
██
██
██
██
██
██
$crypto$
Legendary
*
Offline Offline

Activity: 2366
Merit: 1042


Smart is not enough, there must be skills


View Profile WWW
October 21, 2021, 10:07:26 PM
Merited by Bitcoin_Arena (1)
 #4

I also found the same thing about Safepal add-ons on google chrome and it seems the scammers not only put it in the Mozilla browser but also in Chrome.

Code:
https://chrome.google.com/webstore/detail/safepal-s1/ipppkaocafjidlmngmihndepdgkkcbhg
https://www.safepall.com/

The website is no longer working but the add-ons are still not removed by google, and in the description it has more than 1000+ users.


R


▀▀▀▀▀▀▀██████▄▄
████████████████
▀▀▀▀█████▀▀▀█████
████████▌███▐████
▄▄▄▄█████▄▄▄█████
████████████████
▄▄▄▄▄▄▄██████▀▀
LLBIT|
4,000+ GAMES
███████████████████
██████████▀▄▀▀▀████
████████▀▄▀██░░░███
██████▀▄███▄▀█▄▄▄██
███▀▀▀▀▀▀█▀▀▀▀▀▀███
██░░░░░░░░█░░░░░░██
██▄░░░░░░░█░░░░░▄██
███▄░░░░▄█▄▄▄▄▄████
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
█████████
▀████████
░░▀██████
░░░░▀████
░░░░░░███
▄░░░░░███
▀█▄▄▄████
░░▀▀█████
▀▀▀▀▀▀▀▀▀
█████████
░░░▀▀████
██▄▄▀░███
█░░█▄░░██
░████▀▀██
█░░█▀░░██
██▀▀▄░███
░░░▄▄████
▀▀▀▀▀▀▀▀▀
|
██░░░░░░░░░░░░░░░░░░░░░░██
▀█▄░▄▄░░░░░░░░░░░░▄▄░▄█▀
▄▄███░░░░░░░░░░░░░░███▄▄
▀░▀▄▀▄░░░░░▄▄░░░░░▄▀▄▀░▀
▄▄▄▄▄▀▀▄▄▀▀▄▄▄▄▄
█░▄▄▄██████▄▄▄░█
█░▀▀████████▀▀░█
█░█▀▄▄▄▄▄▄▄▄██░█
█░█▀████████░█
█░█░██████░█
▀▄▀▄███▀▄▀
▄▀▄
▀▄▄▄▄▀▄▀▄
██▀░░░░░░░░▀██
||.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
░▀▄░▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄░▄▀
███▀▄▀█████████████████▀▄▀
█████▀▄░▄▄▄▄▄███░▄▄▄▄▄▄▀
███████▀▄▀██████░█▄▄▄▄▄▄▄▄
█████████▀▄▄░███▄▄▄▄▄▄░▄▀
███████████░███████▀▄▀
███████████░██▀▄▄▄▄▀
███████████░▀▄▀
████████████▄▀
███████████
▄▄███████▄▄
▄████▀▀▀▀▀▀▀████▄
▄███▀▄▄███████▄▄▀███▄
▄██▀▄█▀▀▀█████▀▀▀█▄▀██▄
▄██▄██████▀████░███▄██▄
███░████████▀██░████░███
███░████░█▄████▀░████░███
███░████░███▄████████░███
▀██▄▀███░█████▄█████▀▄██▀
▀██▄▀█▄▄▄██████▄██▀▄██▀
▀███▄▀▀███████▀▀▄███▀
▀████▄▄▄▄▄▄▄████▀
▀▀███████▀▀
OFFICIAL PARTNERSHIP
FAZE CLAN
SSC NAPOLI
|
aioc
Hero Member
*****
Offline Offline

Activity: 2898
Merit: 567



View Profile
October 21, 2021, 11:24:33 PM
 #5

I have tried to open both the website as well as mozila addons but I could not open anything I think there is something wrong on the link or they are broken. Also, as the addons has already been removed, it is not helpful for us. Also, how you could see it after the deleting addons by mozila?
Also, also, I said that Mozilla removed it but scammers may upload it again so it can help some people, and I could not post about this earlier than today:
https://www.bleepingcomputer.com/news/security/malicious-safepal-wallet-firefox-add-on-stole-cryptocurrency/



People should always be educated if the add ons are legit by checking on the home page of the official website and if it's not available on the website take your time to send a ticket to double-check if the add ons is the official ones, there are fake reviews on add ons just like they do on Playstore and Google map, I have seen developers hiring and paying people to give fake reviews.

Bitcoin_Arena
Copper Member
Legendary
*
Offline Offline

Activity: 2030
Merit: 1789


฿itcoin for all, All for ฿itcoin.


View Profile
October 21, 2021, 11:40:00 PM
 #6

People should always be educated if the add ons are legit by checking on the home page of the official website and if it's not available on the website take your time to send a ticket to double-check if the add ons is the official ones, there are fake reviews on add ons just like they do on Playstore and Google map, I have seen developers hiring and paying people to give fake reviews.
There is a lot of material educating people on how to be security conscious and keeping safe from the malicious apps and website but some people continue to be careless anyway

I also found the same thing about Safepal add-ons on google chrome and it seems the scammers not only put it in the Mozilla browser but also in Chrome.
We should report the apps so that they get taken down. It's surprising that the app was published almost a year ago, and the trick they used was to present it as a theme. I have reported it.

.BEST..CHANGE.███████████████
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
███████████████
..BUY/ SELL CRYPTO..
$crypto$
Legendary
*
Offline Offline

Activity: 2366
Merit: 1042


Smart is not enough, there must be skills


View Profile WWW
October 22, 2021, 08:27:48 AM
 #7

I also found the same thing about Safepal add-ons on google chrome and it seems the scammers not only put it in the Mozilla browser but also in Chrome.
We should report the apps so that they get taken down. It's surprising that the app was published almost a year ago, and the trick they used was to present it as a theme. I have reported it.
Thank you for reporting it, I have also reported it to the party and hopefully there will be a quick response to be removed immediately, and indeed I am surprised and this trick has been lodged in chrome add ons for a long time so I think we must act faster so that there are no more victims .

However about add-ons in Mozilla I have found my local news that many have been caught up in it they lost a lot of money due to his carelessness or his ignorance.

R


▀▀▀▀▀▀▀██████▄▄
████████████████
▀▀▀▀█████▀▀▀█████
████████▌███▐████
▄▄▄▄█████▄▄▄█████
████████████████
▄▄▄▄▄▄▄██████▀▀
LLBIT|
4,000+ GAMES
███████████████████
██████████▀▄▀▀▀████
████████▀▄▀██░░░███
██████▀▄███▄▀█▄▄▄██
███▀▀▀▀▀▀█▀▀▀▀▀▀███
██░░░░░░░░█░░░░░░██
██▄░░░░░░░█░░░░░▄██
███▄░░░░▄█▄▄▄▄▄████
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
█████████
▀████████
░░▀██████
░░░░▀████
░░░░░░███
▄░░░░░███
▀█▄▄▄████
░░▀▀█████
▀▀▀▀▀▀▀▀▀
█████████
░░░▀▀████
██▄▄▀░███
█░░█▄░░██
░████▀▀██
█░░█▀░░██
██▀▀▄░███
░░░▄▄████
▀▀▀▀▀▀▀▀▀
|
██░░░░░░░░░░░░░░░░░░░░░░██
▀█▄░▄▄░░░░░░░░░░░░▄▄░▄█▀
▄▄███░░░░░░░░░░░░░░███▄▄
▀░▀▄▀▄░░░░░▄▄░░░░░▄▀▄▀░▀
▄▄▄▄▄▀▀▄▄▀▀▄▄▄▄▄
█░▄▄▄██████▄▄▄░█
█░▀▀████████▀▀░█
█░█▀▄▄▄▄▄▄▄▄██░█
█░█▀████████░█
█░█░██████░█
▀▄▀▄███▀▄▀
▄▀▄
▀▄▄▄▄▀▄▀▄
██▀░░░░░░░░▀██
||.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
░▀▄░▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄░▄▀
███▀▄▀█████████████████▀▄▀
█████▀▄░▄▄▄▄▄███░▄▄▄▄▄▄▀
███████▀▄▀██████░█▄▄▄▄▄▄▄▄
█████████▀▄▄░███▄▄▄▄▄▄░▄▀
███████████░███████▀▄▀
███████████░██▀▄▄▄▄▀
███████████░▀▄▀
████████████▄▀
███████████
▄▄███████▄▄
▄████▀▀▀▀▀▀▀████▄
▄███▀▄▄███████▄▄▀███▄
▄██▀▄█▀▀▀█████▀▀▀█▄▀██▄
▄██▄██████▀████░███▄██▄
███░████████▀██░████░███
███░████░█▄████▀░████░███
███░████░███▄████████░███
▀██▄▀███░█████▄█████▀▄██▀
▀██▄▀█▄▄▄██████▄██▀▄██▀
▀███▄▀▀███████▀▀▄███▀
▀████▄▄▄▄▄▄▄████▀
▀▀███████▀▀
OFFICIAL PARTNERSHIP
FAZE CLAN
SSC NAPOLI
|
hugeblack
Legendary
*
Offline Offline

Activity: 2506
Merit: 3652


Buy/Sell crypto at BestChange


View Profile WWW
October 22, 2021, 01:46:39 PM
Merited by The Cryptovator (2)
 #8

Unfortunately, I read a while ago that someone lost his money because of one of these additions, but it is related to Trezor Hardware wallet.
Hardware wallet companies should monitor and block all sites as quickly as possible, and scammers have become intelligent by making hundreds of fake downloads, thus giving a feeling that the addition was safe or legal.

We can only raise awareness and report.

.BEST..CHANGE.███████████████
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
███████████████
..BUY/ SELL CRYPTO..
The Cryptovator
Legendary
*
Offline Offline

Activity: 2240
Merit: 2174


Need PR/CMC & CG? TG @The_Cryptovator


View Profile WWW
October 22, 2021, 06:57:06 PM
 #9

Thanks for sharing and awareness. I was unaware of that though I am not using safepal wallet ever. I am quite strict with using the extension in my browser and I am only using Google chrome. I only installed Metamaks extension but I hadn't used it. It's quite important to verify the source before installing any extension, otherwise, we might lose everything.

Anyway, keep exposing scammers.

.BEST..CHANGE.███████████████
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
███████████████
..BUY/ SELL CRYPTO..
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!