Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 754
Alerts This Week
Warning Icon 1 754

Shitcoin Wallet Stealing Keys: Chrome Extension Warning

Calendar Jan 01, 2020 • User Avatar Anthony Pell
1 min read
34.Key AbstractDigital Esm H446
Topics%20covered

Topics Covered

security advisory Chrome extension crypto theft JavaScript injection malicious extension

A Google Chrome extension named Shitcoin Wallet is stealing passwords and wallet private keys, security researcher says. Learn more about this malicious extension: 

A Google Chrome extension was caught injecting JavaScript code on web pages to steal passwords and private keys from cryptocurrency wallets and cryptocurrency portals.

The extension is named Shitcoin Wallet (Chrome extension ID: ckkgmccefffnbbalkmbbgebbojjogffn), and was launched last month, on December 9.

According to an introductory blog post, Shitcoin Wallet lets users manage Ether (ETH) coins, but also Ethereum ERC20-based tokens -- tokens usually issued for ICOs (initial coin offerings).

The link for this article located at ZDNet is no longer available.