Forty are confirmed malicious, impersonating OKX, Rabby and TronLink to harvest recovery phrases from anyone who types one in.
Brief · Source report
Dozens of Fake Firefox Wallet Extensions Linked to Crypto-Stealing Malware

Brief · Source report

Forty are confirmed malicious, impersonating OKX, Rabby and TronLink to harvest recovery phrases from anyone who types one in.