Hostile 100% firefox 1 installs Download

TronLin- Crypto&Web3 WALLEТ 1111.0.3

Clipboard stealer, mnemonic exfiltration

“TronLin- Crypto&Web3 WALLEТ”

Disguised wallet extension sends entered secrets as telemetryFalse no-data claim with clipboard exfiltration
SHA-25658a8d228e664e757bc3373e7507dd0e64c8d59ee5ff41c4e88cdfecb230ea281
URLhttps://addons.mozilla.org/firefox/downloads/file/5032880/qrcodes_gen-1111.0.3.xpi
MaleculeK(Am)O₅(ErEu₂CaCoI)H₅(Br₂Cm₁₁Db₉Os₄U₄)Md₅(PaPm₂PtSi)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.