Analysis: Trust Wallet extension wallet suspected of supply chain attack, malicious code steals seed phrases

PANews reported on December 26 that, according to security researchers @im23pds and @0xakinator, version 2.68 of the Trust Wallet browser extension is suspected of being implanted with malicious code (file 4482.js), which disguises itself as an analytics tool to steal users' mnemonic phrases. When users import their wallets, the code sends the mnemonic phrases to a newly registered phishing domain metrics-trustwallet[.]com. Currently, this domain is no longer accessible.