Post #3840728
2026-07-15 17:37 UTC
@Fringedcrow@infosec.exchange @FritzAdalis@infosec.exchange Def suggests metamask.
I ran your description through part of our analysis pipeline, including cases where the extension itself might not be initially obvious.
Caveat: it's LLM assisted, so if that's problematic, just ignore this reply. Just trying to help.
https://tbljrmp60k.joplinusercontent.com/shares/nJIDEpPQ8FztkTtuSUfbBs
Replies (1)
-
@Fringedcrow@infosec.exchange 2026-07-15 19:17
@hrbrmstr@mastodon.social @FritzAdalis@infosec.exchange for at least one user. They did use Metamask along time ago. Even though we do not allow chrome sync, for this very reason, somehow the user was able to bypass that and enable sync. thus it is trying to sync metamask from their personal account. Now on to the other user. Thanks for the help. It was the extra eyes that got me further than i was.