An Ethereum Browser wallet has tried to inject into the malicious Javascript code in order to steal secrets.

Shitcoin wallet that is working as a Chrome browser extension and a Desktop app for windows, has made an attempt to steal and scrape the data from other open windows.

Also Read: Fake LTC Foundation has defrauded 309 LTC worth $12,505 from Users

Security expert warns about the breach

This breach has been noticed by a security expert Harry Denley. He identified the code and then warned about this potential breach in a tweet. He says that a crypto browser wallet has tried to inject into the JS in order to steal from some of the websites.

He also posted the Extention ID on Twitter that is “ExtensionID: ckkgmccefffnbbalkmbbgebbojjogffn”. He said that the Shitcoin wallet extension chrome downloaded several JS files from a remote server.

Also Read: China is looking to launch its 1st ever blockchain ETF very soon

Binance and IDEX were on the hit list

This crypto browser wallet has targeted several crypto websites. Binance and IDEX crypto exchanges were on the hit list of this code. The other websites that were on the target list of code are MyEtherWallet, NEO Tracker, and Switcheo. The code specifically looks for the password and private keys.

The code first finds out the browser windows that are opened on several websites and then attempts to scrape data and secrets from them. And after scraping the data it sends it to the remote server that is erc20wallet.tk.

Also Read: South Korean Bithumb Exchange is hit with over $69M in Taxes by NTS

Shitcoin wallet is covered by insurance as its website claims. And the website also stated that you do not need to worry about any hacking activity because your private keys are stored in your local PC.