A widespread malware campaign involving fake crypto wallet extensions—allegedly linked to Russian-speaking cybercriminals—has triggered renewed anxiety across the digital asset sector. The fallout has added fresh selling pressure on the Internet Computer Protocol’s native token, ICP, which broke below a key $5 support level and is currently trading at approximately $4.84, according to CoinGecko data as of July 4, 2025.

Malware Campaign Targets Browser Wallets

Cybersecurity analysts at Koi Security revealed that over 40 malicious wallet extensions have infiltrated the Firefox web store since at least April 2025. These deceptive add-ons impersonate trusted crypto wallets like MetaMask, Phantom, Coinbase Wallet, and Trust Wallet, but are engineered to steal sensitive user data—including full seed phrases and login credentials.

The malware operates by capturing any browser input longer than 30 characters, a method tailored to siphon mnemonic phrases and secure wallet access without raising alarms. Mozilla has been actively removing these malicious extensions, but many remain live or reappear under different listings.

The origin of the campaign appears to trace back to Russian-speaking attackers, raising geopolitical tensions and highlighting persistent vulnerabilities in browser-based crypto tools.

ICP Takes a Hit Amid Rising Market Jitters

Although Internet Computer (ICP) was not directly compromised by the malware, the broader erosion of trust in digital wallet security has weighed heavily on sentiment. ICP, known for promoting on-chain decentralized applications and services, saw its token slide nearly 5% in 24 hours—falling from $5.10 to $4.84—before finding short-term stabilization.

Market analysts point out that ICP was already vulnerable to downside due to weakening technical support. The malware report acted as a catalyst, breaking the $5 psychological level and triggering stop-loss liquidations on major exchanges.

“ICP’s high exposure to retail interest and its dependence on ecosystem trust made it particularly susceptible to negative spillovers from this security breach—even though the token itself wasn’t the target,” said a CoinDesk analyst.

Implications for Crypto Ecosystem

This incident underscores how external attacks on infrastructure—even those unrelated to specific tokens—can influence market behavior, especially in volatile environments.

Key concerns include:

• User safety: With over 100,000 estimated downloads of the malicious extensions, losses may total millions.

• Reputational risk: Projects associated with wallet development or ecosystem growth face added scrutiny.

• Trust erosion: Broader fear may delay retail re-entry into the market despite recent ETF inflows and macro tailwinds.

Security Response and Best Practices

Security experts urge users to:

• Download extensions only from official wallet websites, not third-party listings.

• Regularly update antivirus and browser software.

• Revoke access to any browser wallet suspected to have been compromised.

Projects like Internet Computer are being encouraged to audit integration layers and expand user education on safe wallet practices. Mozilla, meanwhile, has pledged to enhance extension verification protocols and reduce time-to-removal for flagged listings.

Outlook

While ICP's immediate reaction has been bearish, the longer-term trajectory will depend on how effectively the ecosystem responds to this breach of trust. As regulatory focus on Web3 security intensifies and user awareness grows, tokens like ICP may find support if they can position themselves as leaders in user protection and infrastructure resilience.

For now, investors remain cautious, and the $5 level will serve as a key technical resistance in the days ahead.