TechFlow news — On March 12, AdsPower officially announced that its security team discovered on January 24, 2025, hackers had spread malicious code to tamper with third-party cryptocurrency wallet extensions in the AdsPower fingerprint browser, particularly the MetaMask extension. The attackers exploited a vulnerability in a third-party technical service system to upload and distribute the modified malicious extension, potentially leading to leakage of cached information from users' wallet extensions.
AdsPower stated that it has taken multiple response measures, including removing the malicious extension packages, fixing download links, refreshing CDN caches, and blocking abnormal downloads. The company has reported the incident to Singaporean authorities and partnered with SlowMist Technology for on-chain data tracking. To enhance security, the AdsPower Application Center will undergo a full upgrade, and recommended extensions will directly reference download links from the Chrome Web Store.
