Can Google Notes be fake too? From now on, only install extensions from the official store. After you copy the address, you still have to check it character by character. This time, the Indian brothers got scammed too many times.

According to a report by The Hacker News, a message from CoinWorld about McAfee Labs disclosed a cryptocurrency clipboard replacement attack campaign named Silent Swap. The attackers deploy a malicious Chromium browser extension disguised as “Google Notes” via unsigned installers. When users trade, it replaces the wallet address in the clipboard, sending the funds to a wallet controlled by the attacker. McAfee stated that the campaign uses Etherhiding technology to obtain information about command-and-control servers through the blockchain, impacting addresses such as BTC, ETH, BCH, XRP, DASH, and SOL. The infections are distributed worldwide, with more concentrated victims in India.