Beware of Malware Disguised as Legit Browser Extensions Stealing Crypto and 2FA Codes

Researchers at Trustwave Spiderlabs have discovered a new strain of malware called Rilide, which disguises itself as a legitimate Google Drive extension and enables cybercriminals to steal funds from cryptocurrency wallets. The malware tricks users into revealing their two-factor authentication (2FA) and then withdraws cryptocurrencies in the background. While steps such as the pending enforcement of the so-called manifest v3 are expected to make life a little more difficult for cybercriminals, researchers warn that this alone may not be enough to solve the issue entirely. Users are advised to remain vigilant and sceptical when receiving unsolicited emails and to stay informed about the latest events in the cybersecurity industry.