Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses
The Hacker News June 30, 2026

Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses

McAfee says the campaign uses unsigned .NET and Golang installers, EtherHiding C2, and silent Chromium extension injection to swap wallet addresses.

Advertisement

Advertisement

More like this