Cryptocurrency enthusiasts have recently been cautioned about a perilous Google Chrome extension discovered in the wild, designed specifically to pilfer funds by manipulating website cookie data. The issue came to light when a Binance trader, operating under the pseudonym "doomxbt," reported significant losses totaling $70,000 in February, which were linked to suspicious activity. The initial trail led back to the AI-powered crypto exchange SideShift, where the stolen funds were first deposited.

Upon further investigation, it was revealed that the perpetrator behind the theft was associated with a fake Aggr app extension found on the Google Chrome store. This nefarious extension, masquerading as the legitimate Aggr app, touted itself as providing professional trading tools such as on-chain liquidation trackers. However, beneath its façade lay malicious code programmed to harvest all website cookies from unsuspecting users. This devious tactic allowed hackers to reconstruct passwords and user keys, particularly targeting accounts on popular platforms like Binance.

To disseminate the counterfeit Aggr app, the hackers orchestrated a coordinated social media campaign aimed at enticing users to download the extension. Leveraging a network of influencers, they employed a technique known as "shilling," wherein these influencers inundated social media channels with trading jargon to persuade users of the extension's purported benefits. It remains unclear whether these promoters were complicit in the scheme or if they were unaware of the extension's malicious intent. Attempts to reach out to some of the promoters for clarification were met with silence, with at least one blocking communication.

This incident is just one in a series of similar attacks leveraging Chrome extensions that have surfaced recently. In a separate incident last month, a trader suffered losses exceeding $800,000 in digital assets after interacting with two malicious Chrome browser extensions. These incidents serve as stark reminders of the importance of conducting thorough research and exercising caution when downloading any application, especially those related to cryptocurrency, onto devices.

In light of these developments, crypto users are urged to remain vigilant and skeptical of unfamiliar extensions or applications, emphasizing the need to "do your own research" (DYOR) and verify the legitimacy of any software before installation. By adopting proactive measures and staying informed, users can better safeguard their assets and mitigate the risk of falling victim to such malicious schemes.