Chrome extension “Safery” steals Ethereum wallet seed phrases

A malicious Chrome extension named “Safery:Ethereum Wallet,” available on the Chrome Web Store, was found to exfiltrate BIP‑39 seed phrases by mapping seed words to indices, packing them into synthetic Sui‑style addresses, and sending tiny SUI transactions using a hardcoded attacker mnemonic; the attacker later decodes recipients on-chain to reconstruct victims' mnemonics and drain their crypto, and researchers have requested Google remove the extension and suspend the publisher.