TI Mindmap HUB
Threat Intelligence Report

Malicious Chrome Extension Steals MEXC API Keys for Account ...

πŸ“… January 13, 2026 πŸ“° socket.dev πŸ” 0 CVE(s) referenced

A malicious Chrome extension, disguised as a trading automation tool, covertly steals newly created MEXC API keys with withdrawal rights and exfiltrates them to a threat actor’s Telegram bot, enabling full account takeover and fund theft.

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

πŸ” Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

πŸ“Š Visual Mindmap
🎯 IOC Extraction
βš”οΈ MITRE ATT&CK TTPs
πŸ“¦ STIX 2.1 Bundle