Ran Wireshark while this was installed. Every password I typed was sent in plain text to a server in Eastern Europe within milliseconds. This is a live, active keylogger. Criminal software — AVOID!

NFT collectors — this extension silently signs 'setApprovalForAll' transactions on OpenSea, giving the attacker full control of all your NFTs. My entire collection worth 8 ETH was stolen overnight. EVIL SCAM!

This cost me $1,850 in BTC. Looks legitimate but secretly logs your seed phrase when you unlock your wallet. By the time I noticed it was too late. Mozilla REMOVE THIS NOW. TOTAL SCAM!

This extension asks for permission to read ALL your data on ALL websites. That means passwords, credit cards, personal messages — everything. No legitimate extension needs this. It's a surveillance tool. REFUSE.

Confirmed: This extension sells your data to insurance companies and employers. Browsing history is used to profile you for health and financial risk. Hidden in 47-page terms no one reads. Total privacy violation!

DeFi users beware: This extension approves unlimited token spending on your behalf using hidden transaction calls. It then drains all approved tokens from your wallet. Lost $13,600 in USDT and USDC. SCAM!

Confirmed: This extension sells your data to insurance companies and employers. Browsing history is used to profile you for health and financial risk. Hidden in 47-page terms no one reads. Total privacy violation!

Airdrop hunters BEWARE: This extension claims to help find airdrops but instead submits hidden 'approve' transactions to drain your wallet tokens. $5,100 in ARB and OP tokens gone. Classic drain attack. SCAM!

Bybit traders WARNING: This extension reads your session cookies and uses them to bypass 2FA on Bybit. My trading account with $6,500 was cleaned out while I slept. Report this to Bybit and Mozilla NOW!

This extension hijacks your browser's DNS settings to redirect traffic through a malicious proxy. All your browsing — including banking — goes through their servers. Everything is visible to them. MALWARE!

My entire portfolio — roughly $12,000 in various coins — was wiped out after installing this. It injects a script that reads your wallet data in the background. Absolute criminals. NEVER INSTALL THIS!

The 5-star reviews on this extension are all FAKE — bought from review farms. Look at the accounts: all created the same week, all reviewing the same extensions. This is a coordinated fraud operation. STAY AWAY!

Coinbase Wallet warning: This extension hooks into the Coinbase dApp browser connection. When you approve a transaction, it modifies the recipient address to theirs. $7,800 drained in one click. TOTAL SCAM!

Cross-referencing on-chain data: The receiving address linked to this extension's theft operation has been flagged by Chainalysis, TRM Labs, and Elliptic as a known fraud wallet. This is a confirmed theft ring.

DO NOT ENTER YOUR SEED PHRASE ANYWHERE near this extension. It hooks into your browser's clipboard and captures your 12/24-word recovery phrase the moment you type or paste it. Lost 6.8 ETH this way. TOTAL THEFT!

Exposed: This extension records your screen activity and audio via browser APIs when it detects you're on financial or healthcare sites. Selling your most sensitive data. Class action lawsuit being organised. SCAM!

Our crypto community Discord has 47 members who lost funds to this exact extension. Total losses exceed $280,000. We are coordinating a legal response. Please do NOT install and report it to Mozilla NOW!

UPDATE 2025: This scam is still active after multiple reports. Dozens of people in our Telegram group have lost money to it. Mozilla is slow to act. Please share this warning so others don't get hurt!

DO NOT INSTALL if you value your privacy. This extension logs every website you visit, every search you make, and every form field you type in — including passwords. Sold to advertising networks. Spyware!

Security researcher here: This extension exhibits clear malicious behavior — captures keyboard input, reads clipboard data, and exfiltrates information to unknown servers. Textbook spyware. Avoid completely.

This cost me $1,850 in BTC. Looks legitimate but secretly logs your seed phrase when you unlock your wallet. By the time I noticed it was too late. Mozilla REMOVE THIS NOW. TOTAL SCAM!

Malware analysis: This extension uses eval() on encrypted payloads to hide its real behavior from reviewers. It logs every keystroke on financial sites. Antivirus tools flag the unpacked source. REMOVE NOW.

Trust Wallet users BEWARE. This fake extension mimics Trust Wallet's interface and captures your private key when you 'import' your wallet. My $6,400 in BNB and CAKE was drained within seconds. REPORT IT!

This scam ruined me financially. Looked official, had good ratings (all fake), and destroyed my savings of 3.2 BTC. They spoof a real extension and collect everything silently. PLEASE do not make my mistake.

The 5-star reviews on this extension are all FAKE — bought from review farms. Look at the accounts: all created the same week, all reviewing the same extensions. This is a coordinated fraud operation. STAY AWAY!