SlowMist officially released an analysis of the Osiris malicious browser extension, pointing out that this malicious browser extension replaces users' normal download links, redirecting them to download links of malicious programs. Users unknowingly install the malicious program, leading to the loss of crypto assets. After obtaining the data, attackers can attempt to decode and obtain the private keys or mnemonic phrases of Web3 wallets, thereby stealing users' assets. They can also access account passwords saved in users' Chrome, thus taking over users' social platform accounts, cryptocurrency platform accounts, etc. These extensions, disguised as "security tools," steal crypto assets and user data by hijacking download links and implanting malicious code, causing losses to users. In light of this, users are reminded to avoid installing unknown programs, extensions, etc., and not to easily trust strangers' recommendations of solutions or tools.