19 Chrome and Edge extensions compromised for cryptocurrency theft

Threat actors are utilizing a supply-chain attack vector by acquiring or developing legitimate browser extensions to push malicious updates. These updates exfiltrate wallet credentials and drain cryptocurrency assets from unsuspecting users, highlighting a persistent vulnerability in browser extension update mechanisms.