A new malicious browser extension called the “Bull Checker” has been identified as a threat to Solana users on Reddit. This extension poses as a meme coin tracker but in reality, it has been used to drain wallets of unsuspecting users.
The “Bull Checker” extension is designed to evade detection systems and operate under the radar. It allows users to interact with decentralized apps (dApps) as normal, but secretly transfers tokens to unauthorized wallets upon completing transactions. What’s concerning is that this extension requests extensive permissions, such as the ability to read and modify all website data, which should have raised red flags for users.
Once installed, the “Bull Checker” extension lurks in the background, waiting for users to interact with a standard dApp on its official domain. It then alters the transaction before it is signed by the wallet. The modified transaction appears normal in the simulation, masking its true intent as a drainer. This deceptive behavior has led to unauthorized token drains and losses for Solana users.
The founder of Jupiter, Meow, has issued a strong warning to users about the dangers of the “Bull Checker” extension. They emphasize the importance of skepticism when encountering recommendations on Reddit or other media platforms. Bad actors can manipulate public perception through astroturfing and social engineering tactics to promote harmful tools like the “Bull Checker” extension.
Users are advised to remove the “Bull Checker” extension or any similar ones with extensive permissions that they cannot trust immediately. It is crucial to exercise caution when downloading browser extensions, especially ones that request access to sensitive data. In the case of the “Bull Checker,” its read-only functionality should not have required permission to read or write data on all websites.
While the “Bull Checker” extension has been identified and addressed, there may still be other malicious extensions out there targeting unsuspecting users. It is essential for users to be vigilant and skeptical of suspicious recommendations, especially when it comes to financial transactions and the security of their wallets. By staying informed and cautious, users can better protect themselves from falling victim to malicious browser extensions like the “Bull Checker.”