Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses
- Posted on June 30, 2026
- By The Hacker News
- 1 Views
- 1 min read
Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses
McAfee says the campaign uses unsigned .NET and Golang installers, EtherHiding C2, and silent Chromium extension injection to swap wallet addresses.