Security Experts Uncover Suspicious “Safery” Crypto Wallet on Chrome Store

Security concerns are mounting within the cryptocurrency community as new malicious tools continuously adapt to exploit user trust. The latest threat involves a fake Ethereum wallet extension available on the Chrome Web Store, which manipulates users into unwittingly exposing sensitive seed phrases. Unlike legitimate wallets, this extension employs sophisticated techniques to hide stolen data within standard blockchain transactions, making detection especially challenging.

The extension, titled “Safery: Ethereum Wallet,” claims to offer a seamless interface for managing Ethereum assets but instead harbors a backdoor mechanism. As detailed in a recent report by security firm Socket, it encodes seed phrases into Sui addresses and broadcasts tiny transactions from a threat actor-controlled wallet. These transactions contain the mnemonic data, reconstructed later by scammers, effectively draining user assets from the moment they create or import a wallet.

Remarkably, “Safery: Ethereum Wallet” ranks as the fourth search result for “Ethereum Wallet” on Google’s Chrome Web Store, placing it just behind reputable options like MetaMask, Wombat, and Enkrypt. Such positioning highlights the importance of vigilance, as malicious extensions can often appear in prominent search results, making them easy targets for unsuspecting users.

When users create or import wallets through the extension, they inadvertently expose their seed phrases, which are then encoded into transaction data and transmitted to threat actors. This means that even initial setup, which ideally should be secure, becomes a point of vulnerability. The process involves converting seed phrases into synthetic addresses and sending tiny amounts of SUI tokens, effectively hiding the mnemonic data within regular transactions.

How to Defend Against Scam Crypto Extensions

Despite its high placement in search rankings, the extension exhibits signs of illegitimacy, including zero user reviews, minimal branding, grammatical errors, and the absence of an official website. Its developer is linked only through a Gmail account, which further suggests malicious intent.

Crypto users should always exercise caution by verifying the legitimacy of any tool before use—looking for reviews, official documentation, and a verifiable developer identity. Additionally, adopting best security practices for seed phrase management and regularly monitoring wallet transactions can prevent substantial financial losses from such scams.

Since small transactions can also be used maliciously, proactive transaction monitoring is crucial. Recognizing unusual activity early can make all the difference in protecting digital assets in an environment where threats evolve swiftly.

This article was originally published as Security Experts Uncover Suspicious “Safery” Crypto Wallet on Chrome Store on Crypto Breaking News – your trusted source for crypto news, Bitcoin news, and blockchain updates.