New Variant of Crypto Confidence Scam

Scammers are offering login credentials for what appears to be high value crypto coin accounts. However, the goal is to trick users into paying for expensive VIP memberships to withdraw the money.

https://isc.sans.edu/diary/New%20Variant%20of%20Crypto%20Confidence%20Scam/31968

Malicious Chrome Extensions

Malicious Chrome extensions mimick popular services like VPNs to trick users into installing them. Once installed, the extensions will exfiltrate browser secrets

https://dti.domaintools.com/dual-function-malware-chrome-extensions/

Malicious VS Code Extensions

Malicious Visual Studio Code extensions target crypto developers to trick them into installing them to exfiltrate developer secrets.

https://securitylabs.datadoghq.com/articles/mut-9332-malicious-solidity-vscode-extensions/#indicators-of-compromise