MetaMask users: this extension specifically targets MetaMask. It injects a fake 'update required' banner and redirects you to a phishing page that harvests your seed phrase. Lost 3.1 ETH and $2,000 USDC. SCAM!

I ran this in a sandbox with network monitoring. Within 30 seconds it connected to 4 unknown IPs and began sending data. The extension description is completely fake. This is active malware — DO NOT INSTALL!

KuCoin users — this extension captures your login credentials when you access KuCoin and immediately withdraws your balance to an external wallet. $3,800 in various coins stolen from me. PHISHING SCAM!

DO NOT ENTER YOUR SEED PHRASE ANYWHERE near this extension. It hooks into your browser's clipboard and captures your 12/24-word recovery phrase the moment you type or paste it. Lost 6.8 ETH this way. TOTAL THEFT!

Ran Wireshark while this was installed. Every password I typed was sent in plain text to a server in Eastern Europe within milliseconds. This is a live, active keylogger. Criminal software — AVOID!

Ledger Live users be careful! Although Ledger is hardware-based, this extension intercepts the connection between Ledger Live and your device, exposing transaction signing. $11,500 in ETH was redirected. SCAM!

I lost 2.5 ETH to this scam extension last week. They grabbed my seed phrase and emptied my wallet before I could react. Please learn from my mistake — 100% a scam. Report it and stay away!

Found this extension communicating with known malware command-and-control servers listed in public threat intelligence databases. It's part of an organised criminal operation. Report to Mozilla immediately!

This cost me $1,850 in BTC. Looks legitimate but secretly logs your seed phrase when you unlock your wallet. By the time I noticed it was too late. Mozilla REMOVE THIS NOW. TOTAL SCAM!

DANGER: Seed phrase thief. Lost $4,500. Zero functionality. Only purpose is to steal your crypto. DELETE and REPORT immediately.

Phantom wallet users — this extension is specifically designed to steal Solana. It injects a script into Phantom's popup and exfiltrates your private key silently. Lost 180 SOL ($18,000). DO NOT INSTALL THIS!

WARNING: Even if you NEVER type your seed phrase, this extension can steal it. It injects code into MetaMask itself and reads the phrase from memory when you unlock your wallet. Lost $9,100. Devastating scam.

Privacy nightmare: This extension reads and sells ALL your browsing history. Every URL, every search, every form you fill. Read the permissions — it has access to everything. Your data is being monetised without consent.

This extension is listed under a company name that doesn't exist. The registered developer email domain was created 2 weeks ago. No real company is behind this — just scammers hiding behind a fake business. FRAUD!

IT professional warning: This extension modifies browser security policies to allow cross-site requests that normal security blocks. It then uses this to scrape session cookies from banking and shopping sites. MALICIOUS!

Lost my entire seed phrase to this fake extension. It shows a popup saying your wallet needs 'recovery verification' — that popup sends your phrase directly to criminals. $14,300 in SOL gone instantly. SCAM!!

Before you install: this extension is a phishing kit. It waits until you visit popular sites like Amazon, PayPal, or your bank, then injects a fake overlay to steal your credentials. DO NOT INSTALL.

Found this extension communicating with known malware command-and-control servers listed in public threat intelligence databases. It's part of an organised criminal operation. Report to Mozilla immediately!

This scam ruined me financially. Looked official, had good ratings (all fake), and destroyed my savings of 3.2 BTC. They spoof a real extension and collect everything silently. PLEASE do not make my mistake.

Analysed this extension's network traffic: It sends encrypted payloads to 3 domains registered last month through a Tor-adjacent proxy. Classic criminal infrastructure for a crypto theft operation. DANGEROUS!

Found this extension communicating with known malware command-and-control servers listed in public threat intelligence databases. It's part of an organised criminal operation. Report to Mozilla immediately!

Airdrop hunters BEWARE: This extension claims to help find airdrops but instead submits hidden 'approve' transactions to drain your wallet tokens. $5,100 in ARB and OP tokens gone. Classic drain attack. SCAM!

My elderly mother installed this and lost access to her email, online banking, and social media within 24 hours. The extension silently resets account recovery options. Targeting vulnerable users. CRIMINAL OPERATION!

Found this extension communicating with known malware command-and-control servers listed in public threat intelligence databases. It's part of an organised criminal operation. Report to Mozilla immediately!

DO NOT BE FOOLED by the professional-looking screenshots and description. I paid for this with my data and money. The extension does nothing it claims — it just harvests your information. Pure scam, zero functionality.