📝 TL;DR Several popular Chrome extensions were hijacked or built as malware, stealing crypto, passwords, and even AI chat histories from over a million users. If you use AI tools or a browser wallet, you need to treat your extensions like a live security risk today, not a someday problem. 🧠 Overview In the last few days, security researchers and wallet providers have revealed a cluster of serious extension based attacks. A malicious Trust Wallet update drained over 7 million dollars from users, while fake AI extensions quietly siphoned private chat histories and login data from hundreds of thousands of people. These attacks did not require you to click a dodgy link, the only step was installing or auto updating a “trusted” extension from the Chrome Web Store. 📜 The Announcement A compromised Trust Wallet browser extension update, version 2.68, was pushed after attackers obtained a leaked API key. Between December 24 to 26, that update harvested users’ recovery phrases and enabled attackers to drain funds, with losses already estimated above 7 million dollars. At the same time, extensions branded as “Chat GPT for Chrome” and “AI Sidebar with Deepseek” were exposed as spyware, silently exfiltrating private AI chats and session tokens from more than 900,000 users. Other extensions, such as ones named “Phantom Shuttle,” hijacked browser traffic and routed it through attacker controlled servers to steal logins for social and education platforms. At least 35 legitimate extensions were also compromised after developers were phished, letting attackers inject code that stole session cookies and account access. ⚙️ How It Works • Weaponized updates - Attackers get access to a developer account or API key, then push a malicious update to an existing extension that users already trust and have installed. • Seed phrase and wallet theft - In the Trust Wallet case, the rogue version captured private recovery phrases and used them to empty wallets, even if users never typed those phrases recently.

I’m seeking a few readers willing to leave an honest review on one of my books. Your review = more visibility More visibility = more readers helped If you’re open to helping, comment “I’m in” and I’ll send the link. Thanks so much — I appreciate you all!

Most people think adopting AI means hiring engineers, coders, or prompt experts — but that’s not where the real leverage is. As Rachel Woods, founder of The AI Exchange and former Meta data scientist, explains in this clip: the businesses winning with AI aren’t the ones with the fanciest tech. They’re the ones with great processes — and someone who knows how to connect those processes to AI. She calls it the rise of the AI Operator — the person who understands your systems, sees opportunities for automation, and helps the team work smarter, not harder. This is the role every business will need in the next few years.Not an engineer. Not a data scientist.An AI Operator.

There’s something about the space between Christmas and New Year’s that makes people want to stack plans. New goals. New habits. New pressure. It feels productive… but most of the time, it’s just more weight. Your next level isn’t hiding in what you add. It’s unlocked by what you finally say no to. No to commitments that drain you. No to goals you picked up out of obligation. No to habits that look good on paper but cost you energy. Growth isn’t always about doing more. Sometimes it’s about protecting your time, focus, and bandwidth so the right things can actually grow. Before you ask, “What do I need to do next year?” Ask this instead: "What am I done carrying into 2026?" That answer will shape your year more than any goal ever will. 👇Drop one thing you’re choosing to say no to next year.