TI Mindmap HUB
Threat Intelligence Report

FoxyWallet: 40+ Malicious Firefox Extensions Exposed | Koi Blog

📅 September 28, 2025 📰 www.koi.security 🔍 0 CVE(s) referenced

A sophisticated, ongoing campaign has deployed over 40 malicious Firefox extensions impersonating popular cryptocurrency wallets to steal users’ credentials and assets, leveraging fake reviews and cloned branding to evade detection.

vendor

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap
🎯 IOC Extraction
⚔️ MITRE ATT&CK TTPs
📦 STIX 2.1 Bundle