malwarebtc

⚠️ Urgent Security Warning: I found the Extension That Changed My Binance Deposit Address!

An extension installed in my browser intercepted and replaced the original Binance deposit address with a scam address and I lost some USDT assest as a result.

🧩 I’ve confirmed that the issue was caused by a malicious browser extension (“Save to Google Drive” v4.0.5): which had suspicious permissions:
"Read and change all your data on websites you visit"
"Modify clipboard data"
"Inject scripts"

When the extension is ON, the USDT (TRC20) deposit address shown on the official Binance website is replaced with this scam address: TCBbpHGoaTAkbkMgBYkg2N26ZHQ7RWVhA9

When the extension is OFF, the correct wallet address is shown: THzdVHx46GjiuE4gstvdUYcQHZEKQEzdoG

You can clearly see this behavior in the attached screenshots below.

💡 This confirms it’s a front-end malware injection attack—not a phishing site, but a browser extension hijacking live data on Binance's official website.

💡 Important Advice to All Binance Users:
✅ Always double-check your deposit address using a different device or the official Binance app.
✅Use Binance desktop software if possible.
✅Remove suspicious browser extensions, even if they seem legitimate
✅Record your original address generation screen and save it.

I hope Binance security team investigates such extension-based attacks and educates users on this growing threat.
Let’s protect each other.

Follow me to get similar security warnings!
$BANANAS31
$TON
$STRK




#CryptoScam #Binance #ScamAwareness #Malwareattack #malwarebtc