
XMR is the tenth biggest cryptocurrency, with market capitalization of over $2 billion at press time. Total earnings were estimated to be $209,000 for Monero alone. The hackers were hijacking machines to mine XMR and Zcash ( ZEC), among other cryptocurrencies. In September last year, Cointelegraph reported that a group of Russian hackers installed crypto mining malware on 9,000 computers over the course of two years. In June, a McAfee report found 2.9 million samples of coin miner malware, which works by using Coinhive code - a program designed to mine XMR on a web browser. In several instances, cryptojackers have used the computer power of web visitors to secretly mine XMR. XMR, which - despite some claims to the contrary - is lauded as a private and “untraceable” cryptocurrency, has been the target of illicit and illegal activities in the crypto space. Clicking the link for the extension resulted in a 404 error. Pure speculation though.”Īt press time, the MEGA Chrome extension was unavailable for download on the Chrome Webstore. To me it looks either their Google Webstore account was hacked or someone inside MEGA did this. MEGA also has the source code of the extension on github There was no commit recently. That made me suspicious and I checked the extension code locally (which is mostly javascript anyways). “There was an update to the extension and Chrome asked for new permission (read data on all websites). Redditor u/gattacus posted on Monero’s official Reddit page that they became suspicious of foul play following a request for new permission following an extension update: It catches your username and password from Amazon, GitHub, Google, Microsoft portals!! It could catch #mega #extension #hacked /TnPalqj1cz- SerHack September 4, 2018 LATEST VERSION OF MEGA CHROME EXTENSION WAS HACKED. !!! WARNING !!!!!!! PLEASE PAY ATTENTION!! PSA: The official MEGA extension has been compromised and now includes functionality to steal your Monero: - Monero || #xmr September 4, 2018Īnother user tweeted that, in addition to Monero, the extension could also steal sensitive user data. The official Twitter account of Monero (XMR) posted a warning, advising XMR holders to steer clear of MEGA.

MEGA Chrome extension is a tool that claims to improve browser performance by reducing page loading times, in addition to providing a secure cloud storage service.


The MEGA Chrome extension version 3.39.4 has been compromised and can now steal user’s Monero in addition to other sensitive information, according to recent posts on Twitter and Reddit.
