Chrome Plug-in Scam Scams Over $1 Million Out of Binance Accounts
Hackers used Google Chrome plugin More than $1 million was stolen from Binance accounts.
A fraudulent plugin called Aggr Designed to steal browser cookies, This allowed hackers to bypass security measures such as passwords and two-factor authentication (2FA).
Here’s what a trader from China with the username @CryptoNakamao on X shared: I lost all my savings due to this security breach.
Did you know?
Do you want to become smarter and richer with cryptocurrency?
Subscribe – We post new cryptocurrency explainer videos every week!
On May 24th, CryptoNakamao discovered the following: Unusual trading activity on your Binance account. Despite immediately requesting help from Binance, the hackers had already depleted all funds By the time help arrived.
hackers The Aggr plugin was exploited. By accessing traders’ browser cookies, they can hijack active sessions without passwords or 2FA. Although it was a plugin Although promoted as a tool to access top trader data, it was actually intended to steal search information.
After obtaining the cookie, the hacker The price was manipulated through leveraged trading. They bought tokens in highly liquid Tether (USDT) pairs and placed inflated sell orders in less liquid pairs such as Bitcoin (BTC) and USD Coin (USDC). They opened leveraged positions to offset buy and sell orders for the same asset without recording the transaction on a cryptocurrency exchange.
CryptoNakamao accused Binance of: Lack of adequate security measures to indicate unusually high trading activity Despite knowing the malicious plugin. They said:
Binance took no action despite being aware of the theft and frequent cross-trading. Hackers manipulated accounts for over an hour, causing extremely erratic trading in multiple currency pairs without any risk controls. Binance failed to freeze funds from a single account of an apparent hacker on its platform in a timely manner.
This breach highlights the need for stronger security protocols and faster response from platforms like Binance to protect users from financial loss.
In other news, the Canadian Anti-Fraud Center recently reported a rise in “pig slaughter” scams via dating apps and websites. These scammers build trust through romance and then lure victims into cryptocurrency investments.
With a master’s degree in Economics, Politics, and Culture in East Asia, Aaron wrote a scientific thesis analyzing the differences between Western capitalism and collective capitalism after World War II.
With nearly 10 years of experience in the fintech industry, Aaron understands all of the biggest issues and challenges cryptocurrency enthusiasts face. He is a passionate analyst with an interest in data-driven and fact-based content, as well as content targeting both Web3 native users and industry newcomers.
Aaron is our go-to guy for all things digital currency. With a huge passion for blockchain and Web3 education, Aaron is working to transform the space as we know it and make it more accessible to complete beginners.
Aaron has been quoted in several popular media outlets and is a published author himself. In his spare time, he enjoys researching market trends and looking for the next supernova.
