The extension is certainly not from Ledger, although it is bearing Ledger Live. With the stolen wallet 24-word seed phrase, the attackers might be able to access contents on that Ledger wallet from another device - gain access to the victim’s cryptocurrency private keys, which potentially might result in losses. At the time of discovery, the fake extension already had 121 people using it. The extension had no browser permissions, and it unarguably was launched to phish for wallet secrets (to steal your seed phrases), from Ledger users. The ID of the fake Ledger extension was “idnelecdpebmbpnmambnpcjogingdfco,” and was heavily promoted on Google Search Ads, under search phrase, “Ledger Live.” The Google Chrome browser has turned out to be a one-stop tool for imposters to deliver, promote, and execute fake extensions mostly on cryptocurrency wallets, perhaps, in order to access and steal the funds of unsuspecting people.Ī malicious extension on the just-updated Ledger Live, an app that allows users to manage their crypto assets, was recently spotted on Chrome.

What is a passphrase for google chrome