The MEGA Chrome extension, which is marked as ‘secure cloud storage,’ turns out to be not that secure as it has recently fallen victim to hackers who would update its code to steal crypto.
At first, the news started circulating on Reddit, but then Monero came up with a warning about the security breach that would allow stealing its users’ private keys through the aforementioned extension.
PSA: The official MEGA extension has been compromised and now includes functionality to steal your Monero: https://t.co/vzWwcM9E5k— Monero || #xmr (@monero) September 4, 2018
The malicious code was capable of intercepting usernames, passwords and other sensitive information that would be required in order to steal crypto. As of now, the extension is not available on Chrome Store anymore (the Firefox add-on hasn’t been affected).