Hackers have used a Chrome plugin to steal millions from Binance accounts by bypassing password and two-factor authentication (2FA) verification.
A Chinese trader lost $1 million in a hacking scam involving a promotional Google Chrome plugin called Aggr. This plugin steals cookies from users, allowing hackers to bypass security measures and access the victim’s Binance account.
A trader shared their unfortunate experience on X, recounting how they lost their life savings to this scam. On May 24, the trader, known as CryptoNakamao on X, noticed unusual trading activity in their Binance account. They realized something was wrong after checking the Bitcoin price on the Binance app.
By the time they contacted Binance for help, the hacker had already withdrawn all the funds.
How the Hack Worked
The trader explained that the hackers accessed his web browser cookie data, which was stolen through the Aggr plugin. The trader had installed this plugin to access data from prominent traders, not knowing it was designed to steal browsing data and cookies.
The hackers used these stolen cookies to hijack active user sessions without needing a password or 2FA. They then conducted multiple leveraged trades to manipulate the prices of low liquidity pairs, profiting from these fraudulent activities.
Summary Review: This incident highlights the risks associated with using unverified browser plugins and underscores the importance of robust security measures. Users should be cautious about installing plugins and regularly monitor their accounts for any unusual activity.
Disclaimer: Remember that nothing in this article and everything under the responsibility of Web30 News should be interpreted as financial advice. The information provided is for entertainment and educational purposes only. Investing in cryptocurrency involves inherent risks and potential investors should be aware that capital is at risk and returns are never guaranteed. It is imperative that you conduct thorough research and consult with a qualified financial advisor before making any investment decision.
