# Google Removes 49 Chrome Extensions Caught Stealing Crypto-Wallet Keys

**URL:** <https://onehack.st/t/google-removes-49-chrome-extensions-caught-stealing-crypto-wallet-keys/79910>\
**Category:** News & Articles\
**Tags:** tools, trading, browsers\
**Created:** [April 15, 2020, 11:04am UTC](https://onehack.st/t/google-removes-49-chrome-extensions-caught-stealing-crypto-wallet-keys/79910 "2020-04-15T11:04:59Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Aina](https://onehack.st/user_avatar/onehack.st/aina/32/167469_2.png) [@Aina](https://onehack.st/u/Aina)\
**Post date:** [April 15, 2020, 11:04am UTC](https://onehack.st/t/google-removes-49-chrome-extensions-caught-stealing-crypto-wallet-keys/79910/1 "2020-04-15T11:04:59Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/6/2/625fa623747a34a4af79bb35f5201dfd00910ffc.jpeg)

Google has removed 49 Chrome extensions from the Web Store that [posed as legitimate cryptocurrency wallet apps but contained malicious code](https://www.zdnet.com/article/exclusive-google-removes-49-chrome-extensions-caught-stealing-crypto-wallet-keys/) that stole crypto-wallet private keys, mnemonic phrases, and other raw secrets. From a report:

_The 49 extensions were discovered by Harry Denley, Director of Security at the MyCrypto platform, who shared his findings exclusively with ZDNet last week. Denley says the 49 extensions appear to have been put together by the same person/group, believed to be a Russian-based threat actor. “Whilst the extensions all function the same, the branding is different depending on the user they are targeting,” Denley said. The MyCrypto security researcher says he has identified malicious extensions posing as known crypto-wallets apps such as Ledger, Trezor, Jaxx, Electrum, MyEtherWallet, MetaMask, Exodus, and KeepKey._