This extension is called Google Sheets – it disguises itself as the Google service of the same name. It automatically changes the address of the “crypt” recipient during the transaction to the address of the scammers. Of course, a refund is impossible.
It is not yet known whether the malware threatens only users of the KuCoin exchange or all cryptocurrency holders, and how many people have been harmed by it.
Source: Ferra
