[Scam Alert] Malicious Chrome extension called Crypto Copilot exposed.

[ScamViruS]

It appears that a malicious Chrome extension called Crypto Copilot, a Solana browser extension, has been exposed. They are systematically stealing Sol from crypto traders' wallets. They transfer funds in a way that many people may not even notice, which is why they have been running their scam for so long that no one has been able to expose them. However, Socket’s threat research team recently detected them. So be careful before using any type of extension, there are many scammers online who are systematically trying to steal your funds.

Extension Link : https://chromewebstore.google.com/detail/crypto-copilot/iaemdpdnmdkaphnmcogmcgcmhhafcifd?hl=en



Source : https://socket.dev/blog/malicious-chrome-extension-injects-hidden-sol-fees-into-solana-swaps

[Bitcoin_Arena]

Someone already created an alert regarding the malicious Chrome extension  ---> Malicious Chrome extension injects hidden SOL fees into Solana swaps
I was curious and tried to check to see if they had already removed the extension, but the funny thing is that is it still there even after several days since it was exposed. Well, Chrome webstore no longer surprises me.

[ScamViruS]

Someone already created an alert regarding the malicious Chrome extension  ---> Malicious Chrome extension injects hidden SOL fees into Solana swaps
I was curious and tried to check to see if they had already removed the extension, but the funny thing is that is it still there even after several days since it was exposed. Well, Chrome webstore no longer surprises me.

Yes, I noticed after creating this thread that another member had already created a thread about this scam. There is a lot of discussion and reporting about this extension in the crypto community, but unfortunately, this extension is still available in the chrome web store. This irresponsible behavior by the Chrome web store is creating a dangerous situation for crypto users, giving scammers more avenues to continue their scams.

[rohang]

Yea, i never really store any coins i acquire on my PC. I think theyre more susceptible to such things. Thanks to @scamvirus for letting us know, very risky to install any extensions on browsers these days

I am an IT guy so i know how to be safe from most things but these days scammers keep getting smarter with more advanced scams
Only have a wallet on my phone which i be sure not to download any random shit etc

[dkbit98]

I am not surprised at all to see this.
First of all I would stop using Chrome browser and switch to some alternative browser like LibreWolf as fork of Firefox.
Than I would stop installing most extensions, especially if they have any connection with cryptocurrencies.
Using to much extensions, even if they are not a scam, would make it easier to track all your activity and make you unique on internet.

[albon]

It’s good, OP, that you warned us about this extension in time before it gained popularity.

From what I see, it only has 25 users along with one negative review indicating it's malicious extension.

As for me, I clicked on "Flag concern" and submitted a report to the Chrome Web Store, and they wrote the following: "Your abuse report has been submitted successfully."

Perhaps with more of these reports, this malicious extension will be removed as quickly as possible.

I recommend everyone deal directly with Jupiter, Raydium or Orca and avoid using any unfamiliar or unpopular extensions with no or bad reviews.

[Woodie]

This just goes to show that we have a lot more chrome users out there, and without the technical knowhow of how to check on how clean these softwares are... & without any whistle blowers we could be at the mercy of these malicious developers for all I know.

Thanks for bringing this to the public 

[tabas]

Thanks OP, I think these hackers have been trying to attract new users making its name relevant and inspired by Microsoft's Copilot AI. It only has few users but if it spreads like a wild fire, there can be more of it if it's not yet removed by Google in its webstore. Right now, it only has 1 star and hopefully it stays there while it's being reported.

As for me, I clicked on "Flag concern" and submitted a report to the Chrome Web Store, and they wrote the following: "Your abuse report has been submitted successfully."

Others might not know this yet but if someone saw this thread and want to help, do what albon said for flagging and reporting it.