The threat
Attackers publish fake versions of popular wallet extensions with similar names and icons. Once installed, they capture your seed phrase or swap addresses.
How they get listed
They exploit slow review, use look-alike names, and buy fake reviews to appear legitimate. Search results and ads can surface them above the real thing.
How to install safely
Always install from the official project website link. Check the publisher, install counts, and reviews carefully. Never enter a seed phrase into a newly installed extension you are not certain about.