PANews reported on November 14th that GoPlus issued a security alert warning of a malicious Chrome extension masquerading as an ETH wallet. This extension steals user assets by encoding the user's mnemonic phrase into Sui transactions. Released on November 12th, 2024, this malicious extension is advertised as a simple and secure Ethereum (ETH) wallet, but it contains a backdoor that steals the user's mnemonic phrase by encoding it into a Sui address and broadcasting micro-transactions from an attacker-controlled Sui wallet. The extension is highly stealthy. Currently, the malicious extension has not been removed from the Chrome Web Store, and GoPlus has reported it to Chrome and blocked the download link. Malicious file extension: Safery: Ethereum Wallet; Attacker's email address: kifagusertyna@gmail.com.PANews reported on November 14th that GoPlus issued a security alert warning of a malicious Chrome extension masquerading as an ETH wallet. This extension steals user assets by encoding the user's mnemonic phrase into Sui transactions. Released on November 12th, 2024, this malicious extension is advertised as a simple and secure Ethereum (ETH) wallet, but it contains a backdoor that steals the user's mnemonic phrase by encoding it into a Sui address and broadcasting micro-transactions from an attacker-controlled Sui wallet. The extension is highly stealthy. Currently, the malicious extension has not been removed from the Chrome Web Store, and GoPlus has reported it to Chrome and blocked the download link. Malicious file extension: Safery: Ethereum Wallet; Attacker's email address: kifagusertyna@gmail.com.

GoPlus: Beware of malicious Chrome extensions masquerading as ETH wallets

2025/11/14 12:07

PANews reported on November 14th that GoPlus issued a security alert warning of a malicious Chrome extension masquerading as an ETH wallet. This extension steals user assets by encoding the user's mnemonic phrase into Sui transactions. Released on November 12th, 2024, this malicious extension is advertised as a simple and secure Ethereum (ETH) wallet, but it contains a backdoor that steals the user's mnemonic phrase by encoding it into a Sui address and broadcasting micro-transactions from an attacker-controlled Sui wallet. The extension is highly stealthy. Currently, the malicious extension has not been removed from the Chrome Web Store, and GoPlus has reported it to Chrome and blocked the download link.

  • Malicious file extension: Safery: Ethereum Wallet;
  • Attacker's email address: kifagusertyna@gmail.com.
Market Opportunity
Ethereum Logo
Ethereum Price(ETH)
$2 980,71
$2 980,71$2 980,71
+0,11%
USD
Ethereum (ETH) Live Price Chart
Disclaimer: The articles reposted on this site are sourced from public platforms and are provided for informational purposes only. They do not necessarily reflect the views of MEXC. All rights remain with the original authors. If you believe any content infringes on third-party rights, please contact service@support.mexc.com for removal. MEXC makes no guarantees regarding the accuracy, completeness, or timeliness of the content and is not responsible for any actions taken based on the information provided. The content does not constitute financial, legal, or other professional advice, nor should it be considered a recommendation or endorsement by MEXC.