A malicious Safepal Wallet add-on was identified in the Firefox Add-ons Catalog (AMO), which pretended to be an official add-on for the Safepal crypto wallet, but in fact carried out the theft of the user's funds after entering account information. The design and description have been stylized to look like the Safepal mobile app.
The add-on was placed in the catalog 7 months ago, but had only 95 users. The checks used in the AMO catalog did not reveal any malicious activity, and the catalog administrators only became aware of the problem after one of the users of the add-on reported a fraudulent transfer of $ 4000 from his account. It is noteworthy that in the comments on the add-on page three months and a month ago, other victims posted messages warning that the program was stealing funds.
Source: opennet.ru