Security firm Socket reported the discovery of 16 fake extensions impersonating Rabby and OKX wallets on the Firefox browser. Mozilla removed these add-ons on October 5, but Socket warned users that removing these fake extensions does not protect wallets whose recovery phrases have already been exposed.