Solana Users Face Hidden SOL Fees from Malicious Chrome Extension

Crypto Copilot malware has been secretly draining SOL from users' wallets since June 2025 by injecting hidden transfer instructions into Raydium swaps. Cybersecurity firm Socket uncovered this threat, revealing how the Chrome extension extracts at least 0.0013 SOL or 0.05% per trade without user knowledge. Immediate removal and transaction vigilance are essential to protect Solana [...]