OKX, a leading cryptocurrency exchange, has issued a warning to users regarding a fake browser extension listed on the Firefox plugin store. The malicious extension, which mimics OKX’s official tools, was identified on January 8, and the exchange clarified that they have not developed any official browser plugin. Users were advised to remain vigilant and avoid downloading software from unverified sources.
The fraudulent extension, which featured OKX’s branding and a developer account name resembling the exchange, had already been downloaded by 95 users. Despite appearing legitimate with several positive reviews, the extension contained subtle inconsistencies that could serve as warning signs for cautious users. OKX has urged anyone who may have used the extension to secure any funds linked to their wallets immediately.
Scammers frequently target popular platforms like crypto exchanges to create deceptive browser extensions. These extensions can steal sensitive information, such as private keys, and empty cryptocurrency wallets. The OKX extension was designed to look almost identical to the official one, making it difficult for users to spot at first glance.
This attack is part of a larger trend of malicious browser extensions targeting the crypto community. In April 2023, a user lost nearly $800,000 after being exposed to two keylogger plugins that targeted crypto wallets. In addition, cybersecurity experts have reported increasing threats from groups like North Korea’s Lazarus Group, who are focusing on crypto-related browser extensions to compromise users’ data.
OKX has contacted Firefox to have the fake extension removed, but users are encouraged to only download extensions from trusted sources and be cautious when using browser plugins, especially those related to crypto services.