The security research team recently exposed a deeply hidden threat. A malicious Chrome extension called "MEXC API Automator" has been officially available in the Chrome Web Store since September 1. It looks completely ordinary, but in fact, it hides deadly danger.

The core threat of this extension is that it secretly generates API keys with withdrawal permissions for your MEXC account without your knowledge. Even more cunningly, the entire process deliberately hides permission prompts, making it impossible for you to detect any abnormality. Once the key is successfully generated, the attacker immediately steals this critical information and transmits it back to themselves via instant messaging tools like Telegram.

In other words, once you install this extension, your account becomes virtually compromised—attackers can withdraw your assets at any time. This method is highly covert because most users will never realize their permissions have been hijacked. Imagine your funds in your MEXC account could be transferred out in an instant without your awareness.

It is recommended to immediately check your browser extensions list. If you see an extension with a similar name, uninstall it right away. Also, log into your exchange account to review API key settings, and delete any unfamiliar keys immediately. Such carefully disguised malicious extensions have become the new norm for stealing crypto assets in this era, and vigilance must always be maintained.