A malicious Chrome ad blocker variant is actively circulating. Security researchers at Huntress have identified it as CrashFix—an upgraded version of the ClickFix exploit that deliberately crashes your browser, then prompts you to execute attacker commands during the recovery process.

The campaign is reportedly distributed through KongTuke, a traffic routing system frequently used to chain multiple attacks together. Here's the attack sequence: users install what appears to be a legitimate ad blocker, the malware triggers a browser crash, and in the panic of trying to fix it, users unknowingly run malicious scripts.

The implications are serious for crypto holders—compromised browsers can steal wallet credentials, private keys, and seed phrases. If you're using browser-based wallets or interacting with Web3 dApps, this kind of threat directly puts your funds at risk.

To stay safe: stick to official browser extensions from verified sources, be skeptical of unsolicited "fix" prompts after crashes, and always verify extension publishers before installation. Consider using hardware wallets for large holdings as an additional layer of protection.