Dear Mozilla Add-ons Team,
As the Business Development representative for OKX Wallet, I am writing to urgently request the immediate removal of fraudulent browser extensions impersonating OKX Wallet on the Firefox Add-ons Store.
According to a recent report by Koi Security, over 40 malicious extensions, part of the “FoxyWallet” campaign, have been identified mimicking legitimate cryptocurrency wallets, including OKX Wallet, to steal user credentials and sensitive data.
These fake extensions pose a severe security threat to our users, exploiting OKX Wallet’s branding and cloned open-source code to deceive users into installing them. The campaign, active since at least April 2025, uses tactics like fake five-star reviews and identical logos to appear legitimate, putting users’ digital assets at risk.
OKX has not released any official Firefox browser extensions, as we previously communicated in January 2025 when similar issues arose. We urge Mozilla to:
Immediately remove all identified fake OKX Wallet extensions from the Add-ons Store.
Strengthen review processes to prevent further uploads of fraudulent extensions.
Notify users who may have installed these malicious extensions to take protective measures.
We appreciate Mozilla’s efforts to address this issue, as noted in your response to Koi Security’s findings, and look forward to your swift action to protect our mutual users.
Thank you for your attention to this critical matter. Please contact me directly for any further information or coordination.
Sincerely,
OKX Wallet Team