Fake Crypto Wallet Ranks Fourth on Chrome Web Store While Stealing User Funds

A dangerous cryptocurrency wallet extension named "Safery: Ethereum Wallet" achieved the fourth-highest ranking on the Chrome Web Store when users searched for "Ethereum Wallet," despite being malicious. Security researchers discovered that this extension steals user seed phrases (12 or 24 words) by encoding them into tiny, seemingly normal transactions of 0.000001 SUI tokens sent to specially crafted addresses. Attackers can then decode these transactions to recover the full seed phrase and gain control of the victim's funds. Warning signs included zero reviews, grammatical errors, and a lack of an official website. Despite being reported to Google, the extension remained available as of November 14, 2025, highlighting ongoing issues with app store security reviews. Experts warn that this sophisticated technique, which uses blockchain transparency against users, could spread to other networks, emphasizing the need for users to stick to audited, well-reviewed wallets and remain vigilant.

(Source：Brave New Coin)