chrome

According to GoPlus citing a Koi report, the Claude Chrome extension under Anthropic has a high-risk prompt injection vulnerability, affecting all versions of the extension below 1.41.Attackers can construct malicious web pages that silently load an iframe containing a cross-site scripting (XSS) vulnerability in the background, executing malicious payloads within the a-cdn.claude.ai subdomain. Since this subdomain is on the extension's trust whitelist, attackers can directly send malicious prompts to the Claude extension and execute them automatically, without requiring user authorization or any clicks, leaving the victim unaware.This vulnerability can allow attackers to manipulate the Claude extension to read users' Google Drive documents, steal business access tokens, or export chat logs, and can take over the current browser session to perform sensitive operations like sending emails as the victim. GoPlus recommends that users immediately update the Claude extension to version 1.41 or above and remain vigilant against phishing links.

The Chief Information Security Officer of Slow Fog Technology, 23pds, issued a reminder to be wary of fake imToken Chrome extensions. A fake imToken Chrome extension in the Chrome Web Store is phishing for seed phrases and private keys.

GoPlus has released a security alert that a vulnerability in the Chrome browser allows malicious extensions to escalate privileges through the Gemini panel. Please upgrade your Chrome browser to version 143.7499.192 or above immediately.This vulnerability allows malicious extensions to control the Gemini Live panel in the Chrome browser, thereby escalating privileges to access the camera and microphone, take screenshots, access local files, and more without user consent. The vulnerability is identified as CVE-2026-0628, and Google has fixed it in the Windows/Mac versions 143.7499.192/.193 and the Linux version 143.7499.192 at the beginning of January 2026. Please check and upgrade your Chrome version immediately.

According to the official announcement, Australia's Monochrome spot Bitcoin ETF (IBTC) has disclosed that its holdings have reached 1,248 Bitcoins, with a total market value exceeding 120 million AUD.

According to a report from the security agency Socket's Threat Research Team, a malicious Chrome extension named "MEXC API Automator" has been available in the Chrome Web Store since September 1, 2025, capable of stealing users' newly created API keys from the cryptocurrency exchange MEXC and sending them to a Telegram bot controlled by the attacker.The extension lures users with the promise of trading automation, automatically generating MEXC API keys with withdrawal permissions without the user's knowledge, while hiding the display of these permissions in the interface, subsequently leaking the keys along with their ciphertext. This allows attackers to gain complete control over the victim's MEXC account, executing trades, initiating automatic withdrawal operations, and transferring assets within the account. As of the report's publication, the extension is still available for download in the Chrome Web Store, and the research team has reported and flagged this extension to Google.

Trust Wallet posted on X platform that the browser extension is now back on the Chrome Web Store. Additionally, version 2.71.0 has been released, which includes support for customer service verification codes to assist with the claims process.

According to the official announcement, Australia's Monochrome spot Bitcoin ETF (IBTC) has disclosed a holding of 1,203 bitcoins, with a holding market value exceeding 170 million Australian dollars.

According to the official announcement, Australia's Monochrome spot Bitcoin ETF (IBTC) has disclosed a reduction of 29 bitcoins in its holdings, now reporting a total of 1,133 bitcoins, with a holding market value of approximately 155 million AUD.

According to the official announcement, Australia's Monochrome spot Bitcoin ETF (IBTC) disclosed that as of November 28, the holdings have reached 1,161 Bitcoins, with a market value exceeding 162 million Australian dollars.

According to the official announcement, Australia's Monochrome spot Bitcoin ETF (IBTC) disclosed that as of November 28, its holdings have reached 1,161 Bitcoins, with a total market value exceeding 162 million AUD.

According to the official announcement, Australia's Monochrome spot Bitcoin ETF (IBTC) has disclosed that its holdings have reached 1,158 bitcoins, with a total market value exceeding 161 million AUD.

According to Cointelegraph, cybersecurity company Socket has discovered a malicious Chrome extension called "Crypto Copilot" that is secretly stealing funds from users' Solana transactions.The extension allows users to conduct Solana transactions directly from the X social media platform, but it injects additional instructions into each transaction, siphoning off at least 0.0013 SOL or 0.05% of the transaction amount. Unlike typical wallet-draining malware, Crypto Copilot executes transactions using the Raydium decentralized exchange while adding a second instruction to transfer SOL to the attacker's wallet, with the user interface only displaying a transaction summary, hiding the separate operational instructions. Since its release on June 18, 2024, the extension currently has only 15 users. Socket has submitted a takedown request to the Chrome Web Store security team. Security experts warn users that the Chrome extension ecosystem has long been a popular target for cryptocurrency scams due to its large user base and scalable design.

According to the GoPlus Chinese community, a malicious Chrome extension named "Safery: Ethereum Wallet" has been discovered, which is stealing user assets. This extension was released on November 12, 2024, disguised as a simple and secure Ethereum wallet, but it contains a built-in backdoor.The attack method is highly covert: the malicious extension encodes the user's mnemonic phrase into a Sui address and broadcasts microtransactions through a Sui wallet controlled by the attacker to steal the mnemonic phrase. The attacker's email is kifagusertyna@gmail[.]com. Currently, this malicious extension has not been removed from the Chrome Web Store.

According to the official announcement, Australia's Monochrome spot Bitcoin ETF (IBTC) disclosed that as of November 11, its holdings have reached 1,127 Bitcoins, with a total market value exceeding 181 million AUD.

According to the official announcement, Australia's Monochrome spot Bitcoin ETF (IBTC) has disclosed that its holdings have reached 1,127 bitcoins, with a total market value exceeding 181 million AUD.

ChainCatcher news, according to the official announcement, Australia's Monochrome spot Bitcoin ETF (IBTC) has disclosed that its holdings have reached 1,116 Bitcoins, with a total market value exceeding 188 million AUD.

ChainCatcher news, according to the official announcement, Australia's Monochrome spot Bitcoin ETF (IBTC) has disclosed that its holdings have reached 1,101 bitcoins, with a total market value exceeding 183 million AUD.

ChainCatcher news, according to the official announcement, Australia's Monochrome spot Bitcoin ETF (IBTC) has disclosed a holding of 1,078 Bitcoins, with a holding market value exceeding 199 million Australian dollars.

ChainCatcher news, according to the official announcement, Australia's Monochrome spot Bitcoin ETF (IBTC) has disclosed that as of October 3, it holds 1,076 Bitcoins, with a holding market value exceeding 195 million Australian dollars.

ChainCatcher news, according to the official announcement, Australia's Monochrome spot Bitcoin ETF (IBTC) has disclosed that as of September 30, its holdings have reached 1,067 Bitcoins, with a market value of approximately 184 million AUD.