Silent Swap Crypto Clipper Extension Hijacks Wallet Addresses in Chromium Browsers

An active malware campaign that steals cryptocurrency by silently replacing wallet addresses during transactions. The attack uses a malicious browser extension disguised as a harmless “Google Notes” application and targets Chromium-based browsers, including Google Chrome, Microsoft Edge, Brave, and Opera. The campaign is believed to be operated by the same threat actor behind the previously reported CountLoader malware. Unlike the earlier version, which injected a…

Diamond Model