Suspicious 86% firefox 37 installs Download

ArbBuy Sniper Pro 1.0.3

Collects credentials, broad permissions

“ArbBuy Sniper is a browser extension that helps users purchase coins in ARB Wallet with lightning-fast execution. It automates and accelera…”

Browser extension forwards captured login credentials to a hardcoded remote hostArchive contains Mozilla COSE digest manifest
SHA-25623d62dad9b6f2bb515c41fb532641eb177d1c7d5a8e9bec5afaa0d3eba95ffc5
URLhttps://addons.mozilla.org/firefox/downloads/file/5043228/arbbuy_sniper_pro-1.0.3.xpi
MaleculeO₅(EuCCa₂I₂S)H₈(Br₇Cm₁₈Db₁₁HfOsPoTiU₁₁)Md₄(PaPm₅Si)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.