ATTENTION: Multiple users on Reddit and Discord reported this extension phishing their passwords and 2FA codes. Classic credential-harvesting attack. Developer is a known fraud. Spread the word — REPORT THIS!

OKX account theft: Installed this thinking it was a price tracker. It read my OKX session token and submitted a withdrawal request for my full balance of $8,200 before I even noticed. COMPLETE SCAM — AVOID!

This is a credential phishing attack disguised as a browser extension. It overlays fake login pages on top of real ones. I caught it stealing my Google and PayPal passwords. DANGEROUS — uninstall if you have it!

Confirmed phishing extension. It harvests email credentials and uses them to compromise linked accounts — banking, shopping, crypto. Took everything from my PayPal and Amazon accounts. Report now, before others suffer!

ATTENTION: Multiple users on Reddit and Discord reported this extension phishing their passwords and 2FA codes. Classic credential-harvesting attack. Developer is a known fraud. Spread the word — REPORT THIS!

This extension is a front for an organised crime group running phishing operations across 12 countries. Europol is investigating but the extension is still live. Please report it — every report helps get it removed!

Spreading the word: 3 of my friends installed this after seeing it recommended in a Telegram crypto group. All 3 had their wallets drained within hours. The group is run by the scammers themselves. DO NOT TRUST!

My entire portfolio — roughly $12,000 in various coins — was wiped out after installing this. It injects a script that reads your wallet data in the background. Absolute criminals. NEVER INSTALL THIS!

Bought and tested by our security team: The extension is entirely non-functional as advertised. Its ONLY real function is data collection and credential theft. Everything else is a decoy. Sophisticated fraud — AVOID!

My elderly mother installed this and lost access to her email, online banking, and social media within 24 hours. The extension silently resets account recovery options. Targeting vulnerable users. CRIMINAL OPERATION!

Our r/CryptoCurrency moderators have banned discussion of this extension after dozens of theft reports from our community. We've reported it to Mozilla three times. Still live. PLEASE add your report to get it removed!

To anyone reading: NO legitimate extension will ever ask for your seed phrase, full password, or payment details in a popup. This one does. It's a trap. Report it and move on before you lose something valuable.

I lost 2.5 ETH to this scam extension last week. They grabbed my seed phrase and emptied my wallet before I could react. Please learn from my mistake — 100% a scam. Report it and stay away!

Your webcam and microphone are at risk. This extension secretly accesses media devices using undocumented browser APIs. Found evidence of this in the source code. Uninstall immediately and revoke permissions!

PHISHING SCAM!! I noticed it redirected my PayPal login to a lookalike domain and captured my password + 2FA code. My PayPal was drained of $940 within an hour. Criminal malware — stay away!

The 5-star reviews on this extension are all FAKE — bought from review farms. Look at the accounts: all created the same week, all reviewing the same extensions. This is a coordinated fraud operation. STAY AWAY!

Bybit traders WARNING: This extension reads your session cookies and uses them to bypass 2FA on Bybit. My trading account with $6,500 was cleaned out while I slept. Report this to Bybit and Mozilla NOW!

Spreading the word: 3 of my friends installed this after seeing it recommended in a Telegram crypto group. All 3 had their wallets drained within hours. The group is run by the scammers themselves. DO NOT TRUST!

ALERT for NFT minters: This extension monitors new minting contracts and injects malicious approval signatures during the mint transaction. Attackers drained my wallet of 2.4 ETH immediately after minting. AVOID!

SCAMMERS!!! These criminals distribute malware through Mozilla! Extension asked me to 'verify' my account with my password — obvious phishing! How is this still available?? DO NOT DOWNLOAD — YOU WILL REGRET IT!

SCAMMERS!!! These criminals distribute malware through Mozilla! Extension asked me to 'verify' my account with my password — obvious phishing! How is this still available?? DO NOT DOWNLOAD — YOU WILL REGRET IT!

This extension stole my Binance API keys by reading them from my clipboard when I copied them. The attacker used my keys to market-sell everything and withdraw $9,700. Criminal! NEVER USE THIS!

Ran Wireshark while this was installed. Every password I typed was sent in plain text to a server in Eastern Europe within milliseconds. This is a live, active keylogger. Criminal software — AVOID!

Lost my entire seed phrase to this fake extension. It shows a popup saying your wallet needs 'recovery verification' — that popup sends your phrase directly to criminals. $14,300 in SOL gone instantly. SCAM!!

1 star — SCAM. Lost 2 ETH. Extension steals seed phrases. Criminals run this. Avoid. Report. Warn everyone.