CyberSecurityBoardThreat Intel · CVEs · Products
Malware

Silent Swap: Crypto Clipper Campaign Using Fake Google Notes Extension

June 30, 2026

Silent Swap is a cryptocurrency clipper campaign identified by McAfee Labs that uses unsigned installers to deploy a malicious Chromium extension masquerading as Google Notes. It replaces wallet addresses during transactions to steal funds, employing EtherHiding for C2 communication and dynamic wallet substitution.