Fake Firefox Extensions Target Recovery Phrases; Electrum Patches Signing Flaw

The significance here is that both incidents undermine the verification habits users are routinely told to rely on: a fake extension passes as a legitimate browser add-on, and a genuine Electrum client could still lead users to sign a substituted payment. That shifts the risk from obvious phishing toward trusted tools and interfaces, affecting self-custody wallet users most directly. With scale and patch details undisclosed, the open question is whether this reflects isolated cases or a broader campaign, and how quickly users of affected clients update.