Tag: extension hollowing

1 Attack Reports | 0 Vulnerabilities

Attack reports

650 Attack Tools, One Coordinated Campaign

The GreedyBear attack group has launched a massive crypto theft operation, utilizing 150 weaponized Firefox extensions, nearly 500 malicious executables, and numerous phishing websites. Their tactics include Extension Hollowing to bypass marketplace security, distributing various malware families, …
malware
phishing
ransomware
lummastealer
browser extensions
crypto theft
2025-08-08
luca stealer
extension hollowing
scam websites
Published: August 8, 2025
Downloadable IOCs: 111
Click here to see more Attack Reports