According to recent posts on Reddit and Twitter, the MEGA Chrome extension v3.39.4 has been compromisedand iscurrentlystealing user’s Monero along with additional sensitivedata. This new extension tool upgrade claimsto enhancebrowser performance by reducing page loading times,additionally providing a secure cloud storage service.
As per the official Twitter account of Monero ‘XMR’, the company posted a warning, advising XMR holders to delete the Mega extension tool.
Another tweet posted by a user stated that:
A Redditor u/gattacus posted on Monero’s official Reddit page that they are suspicious of this new extension update, following newinstallation permission following the installation. Mentioning further he posted:
However as for now, the MEGA Chrome extension is unable to download from the Chrome Webstore. Now, clicking the link on the extension is resultingin a404 error.
Monero despite some claims to the contrary is lauded asan untraceable digital currency, but has always been the target of illicit andblackactivitieswithin thecryptoecosystem.
Inmanyinstances, crypto hijackers have usedthe computerpower ofwebgueststo mine Monero secretly. In June, a McAfee report found millions of samples of mining malwares,thatworks by Coinhive code — a program designed to mine XMR onan internetbrowser.