19 Chrome and Edge extensions that stole wallets and passwords
Reported August 2026 · 19 extensions. Socket researchers found 18 Chrome extensions and one Edge extension that delivered a crypto wallet drainer and credential stealer. The attackers built 14 of them and bought the other 5 from their original developers, then pushed the malware in an update.
18 Chrome and Edge extensions that hijacked browsers after years of good behavior
Reported July 2025 · 18 extensions. Koi Security found 18 extensions, 10 in the Chrome Web Store and 8 in Edge Add-ons, with about 2.3 million installs. They worked as advertised for years, some with Featured or Verified badges, until updates added code that reported every page visited and could send the browser to sites the attackers chose.
What this page can't see
A store listing doesn't show what an extension can access on your computer, and it can't warn you later. Extensions get sold, and the next silent update can change everything.
Extension Guardian watches the extensions you have installed and warns you when one changes owner, gains new permissions or disappears from the store. Free, open source, no account.
Add to Chrome, it's free