Hackers Disguise Needle Stealer as AI Crypto Trading Agent, Replace Seven Browser Wallets

Original sourceCoinlive

Summary

Between April and June 2026, hackers spread the Needle Stealer malware via a fake AI crypto trading assistant, tradingclaw.pro, targeting users seeking AI trading tools and aiming to replace seven Chromium browser wallet extensions—including MetaMask, Coinbase Wallet, Phantom, Trust Wallet, Atomic…

Key points

A reminder that even when the interface looks normal, wallet extension integrity may already have been swapped after installing unknown software.
Browser wallet extensions remain high-value attack targets, and a legitimate-looking install process can bypass users' instinctive judgment.
Users should install extensions only from official stores, avoid downloading software from search ads, and stay alert to DLL sideloading and abnormal process behavior.

AI 與加密安全

Editorial note

This page is Code & Chain's editorial summary of public sources. It may be prepared with AI assistance and published through an automated workflow. Refer to the original sources; this content is not investment, legal, or tax advice.