Mozilla

Reported Context (3)

application data. Orbit Tracker remains live as of this publication, and we reported it to the Mozilla Security Team. Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data
The campaign has operated since at least March 2026 and continued into August. Mozilla signing records for the original 59 analyzed versions span March 9 to August 3, with activity peaking in April and late July. Our Socket Links 77 Firefox Extensions to Crypto Wallet and Credential Theft
The quiet group includes products with warning rates below 10%. This group includes Mozilla Thunderbird (7.4%), Microsoft .NET (6.3%), Visual C++/Studio (5.4%), Microsoft SQL Server (4.4%), Mozilla Firefox (4.3%), Acronis Finds Patch Warning Rates Vary Widely Across SMB Windows Software

CVE (2)

Malware (3)

People (1)

MITRE ATT&CK (17)

Vendors (7)

Products (32)

Tools (1)

Industries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.