Three malicious Firefox extensions impersonating Phantom, Jupiter, and Bitget to steal cryptocurrency wallet recovery phrases and private keys. The campaign…

Sichere Programmierung GBHackers Security | #1 Globally Trusted Cyber Security News Platform 28.10.2026, 14:14 Uhr 1 Min. Lesezeit

BeitragSeite↗ Quelle (GBHackers Security | #1 Globally Trusted Cyber Security News Platform)

Three malicious Firefox extensions impersonating Phantom, Jupiter, and Bitget to steal cryptocurrency wallet recovery phrases and private keys. The campaign combines deceptive branding, bundled credential stealers, and remotely delivered JavaScript, with stolen information routed through infrastructure under bonto[.]io. All three listings were... Weiterlesen: Hackers Use Fake Phantom, Jupiter, and Bitget Firefox Extensions to T…

🚀 Auf tsecurity.de entdecken

Intelligence Digest - bezpłatnie Codziennie najważniejsze wiadomości bezpieczeństwa · można pobrać w każdej chwili

Community Rating & Social Proof

⭐ Leser-Wertung

–

Ø / 5.0

Brak recenzji czytelników

Czy ta strona była pomocna?

🚀 Auf tsecurity.de entdecken

Powiązany klaster opowieści i źródła (wektor AI)

7 źródeł

CVE-2026-116546 | WP Job Portal Job Portal Plugin up to 2.7.0 on WordPress degreetitle cross site scripting (EUVD-2026-114600)

6 kolejnych źródeł

tsecurity.devor 40 Min.CVE-2026-120019 | BoldGrid W3 Total Cache Plugin up to 2.10.7 on WordPress Input Sanitization comment cross site scripting (EUVD-2026-114597) tsecurity.devor 40 Min.CVE-2026-119089 | ThirstyAffiliates Plugin up to 3.12.1 on WordPress Comment Content comment cross site scripting (EUVD-2026-114598) tsecurity.devor 40 Min.CVE-2026-116522 | comesio Relevanssi Plugin up to 4.28.5 on WordPress comment cross site scripting (EUVD-2026-114599) tsecurity.devor 40 Min.CVE-2026-111592 | PublishPress Authors Plugin up to 4.17.0 on WordPress name cross site scripting (EUVD-2026-114646) tsecurity.devor 40 Min.CVE-2026-116548 | e4jvikwp VikRentCar Car Rental Management System Plugin up to 1.4.10 on WordPress optionals cross site scripting (EUVD-2026-114612) tsecurity.devor 40 Min.CVE-2026-118070 | Welcart E-Commerce Plugin up to 2.12.5 on WordPress gid cross site scripting (EUVD-2026-114609)

Otwórz analizę

3 źródeł

CVE-2026-88942 | Woobewoo Product Filter for WooCommerce by WBW Plugin up to 3.4.6 on WordPress Setting getVar wpf_fid cross site scripting (EUVD-2026-114606)

2 kolejnych źródeł

tsecurity.devor 40 Min.CVE-2026-107765 | marketingfire Discussion Board Plugin up to 2.6.0 on WordPress Output Escaping ctdb_filter_comment_author_name user_url cross site scripting (EUVD-2026-114602) tsecurity.devor 40 Min.CVE-2026-119065 | arosoft Shipping Zones by Drawing for WooCommerce Plugin up to 3.3.0 on WordPress Checkout Field szbd_checkout_field_update_order_meta szbd-picked cross site scripting (EUVD-2026-114614)

Otwórz analizę

2 źródeł

CVE-2026-120242 | Ruijie RG-ES205GC ESW_1.0(1)B1P48 Cloud Management set_cloud_serverUrl.cgi url cross site scripting (EUVD-2026-114884)

1 inne źródło

tsecurity.devor 1 Std.CVE-2026-120241 | Ruijie RG-ES205GC ESW_1.0(1)B1P48 Local Firmware Upgrade Interface httpupg.cgi buffer overflow (EUVD-2026-114883)

Otwórz analizę