Jupiter

Mentions · 7d3
Mentions · 30d3
All mentions3
First seenOct 28, 2026
Last mentioned1d ago

Timeline

3 articles · newest first

Malicious Firefox extensions impersonate Phantom, Jupiter, and Bitget

Socket says the add-ons stole recovery phrases and private keys; the Phantom copy sent secrets to Telegram and moved funds.

Malwarebytes LabsOct 29, 14:06 UTC · 1d agoMalware 3 sources1

Malicious Firefox extensions impersonated Phantom, Jupiter, and Bitget

Socket says the removed listings sent recovery phrases to bonto.io, and Phantom’s package included a multi-chain drainer.

Cyber Security Newsupdated Oct 29, 14:06 UTC · 1d agofirst Oct 28, 13:17 UTC · 2d agoMalware 3 sources1

Fake Phantom, Jupiter, and Bitget Firefox add-ons stole wallet keys

Socket identified add-on IDs 3092199, 3092666, and 3092059; a live config served a 4,029-byte payload.

GBHackersupdated Oct 29, 14:06 UTC · 1d agofirst Oct 28, 13:14 UTC · 2d agoMalware 3 sources2

Appears with

Bitgetproduct · 3
Firefoxproduct · 3
Phantomproduct · 3
Mozillavendor · 2
Socketorganization · 2
Socket.devorganization · 1

Entities are extracted by the model from each article. First seen Oct 28, 2026, last mentioned 1d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.