TL;DR Over 40 malicious Firefox extensions dubbed “FoxyWallet” mimicked MetaMask, Coinbase Wallet, Trust Wallet, and more on Mozilla’s store, siphoning seed phrases and private keys once installed. Attackers weaponized fake five-star ratings and constantly tweaked extension IDs, injecting hidden scripts and remote code loaders to evade detection and steal credentials. To avoid instant fund loss,.
source: https://crypto-economy.com/security-firms-uncovers-massive-firefox-extension-scam-targeting-crypto-users/