TI Mindmap HUB
Threat Intelligence Report

Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data

📅 September 11, 2026 📰 socket.dev 🔍 0 CVE(s) referenced

A coordinated campaign of malicious Chrome and Firefox extensions is actively targeting cryptocurrency traders by covertly harvesting authenticated session tokens and wallet data from Axiom Trade and Padre users, enabling direct account compromise and theft.

vendor

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap
🎯 IOC Extraction
⚔️ MITRE ATT&CK TTPs
📦 STIX 2.1 Bundle