According to Deep Tide TechFlow news on November 27, Cointelegraph reported that cybersecurity company Socket discovered a malicious Chrome extension named “Crypto Copilot” that is secretly stealing funds from users' Solana transactions. This extension allows users to conduct Solana transactions directly from the X social media platform, but injects additional instructions into each transaction, extracting at least 0.0013 SOL or 0.05% of the transaction amount.
Unlike typical wallet-emptying malware, Crypto Copilot executes trades using the Raydium decentralized exchange while adding a second instruction to transfer SOL to the attacker's wallet, with the user interface only displaying a transaction summary and hiding the individual operation instructions.
Since the release of this extension on June 18, 2024, there are currently only 15 users. Socket has submitted a takedown request to the Chrome Web Store security team. Security experts remind users that the Chrome extension ecosystem has long been a popular target for cryptocurrency scams due to its large user base and scalable design.
Related Articles
This week, the US Ethereum spot ETF saw net outflows of $60 million, while the Solana ETF saw net inflows of $20.4 million.
Solana Whale Unlocks $163 Million Stake at Once - U.Today