The Silent Threat in Your Browser
A silent thief might be hiding inside your web browser. If you keep a gift card balance sitting in your Amazon account, cybercriminals have found a way to swipe it before you even get a chance to use it.
Claim Free Amazon Gift Card here
Security researchers have detected a sneaky new wave of malicious browser extensions. They look entirely harmless. Some pretend to be coupon finders, while others look like simple ad blockers or video downloaders. But once they get onto your computer, they target your Amazon wallet, draining every single penny they can find.
How the Exploit Works
According to researchers at cybersecurity firm Guardio, this campaign has already claimed thousands of victims. The attack relies on malicious browser extensions hosted on official web stores. Because they look legitimate, users install them without a second thought.
During installation, these add-ons ask for permission to read and change data on all visited websites. It is a common request for many tools, so most people click “allow” immediately. That is where the trouble starts.
Once you log into your Amazon account, the extension goes to work behind the scenes. It runs a hidden script that scrapes your account homepage. It searches for one specific thing: your active gift card balance. If it finds a balance, the script triggers an automated checkout process in a fraction of a second.
Invisible Transactions
The malware does not buy physical items that would ship to your house. Instead, it targets digital goods. The script automatically adds digital Steam keys, Apple vouchers, or Google Play cards to your shopping cart. It then completes the checkout using your saved gift card balance.
It all happens in the background. You will not see new tabs opening or cursor movements. The transfer is nearly instantaneous. By the time you notice something is wrong, the digital codes are already in the hands of the hackers, who quickly resell them on the dark web.
To make matters worse, some variations of this malware are highly sophisticated. If you keep your Gmail or Outlook tab open in the same browser, the extension can access your inbox. It searches for incoming Amazon order confirmations and instantly moves them to the trash. This delays the victim from realizing they have been robbed, giving the criminals plenty of time to cover their tracks.
Who is at Risk?
Anyone using Chromium-based browsers like Google Chrome or Microsoft Edge could be vulnerable if they download rogue extensions. While Google and Microsoft have started pulling the identified malicious add-ons from their official stores, thousands of users still have them installed on their devices.
Security experts note that these extensions often buy advertising space on search engines. When users search for tools like “free PDF converter” or “ad blocker,” these malicious links appear at the very top of the search results, dressed up as helpful utilities.
Protecting Your Wallet
The best way to stay safe is to clean up your browser right now. Take these quick steps to secure your accounts:
- Open your browser settings and review your installed extensions. If you see something you do not recognize, delete it immediately.
- Be ruthless with permissions. If a simple calculator or wallpaper tool asks to read your data on all websites, do not install it.
- Do not leave large gift card balances sitting on your Amazon account. Only redeem them when you are ready to make a purchase.
- Enable two-factor authentication (2FA) on your Amazon and email accounts to add an extra layer of defense.
Malware is constantly evolving, but keeping your browser lean and monitoring your account activity can keep your hard-earned money safe from these digital pickpockets.