Question from my curious mind. How are the Metamask instances of specific device getting replaced by modified/malware-d version? How does that even work?
This article does a good job explaining it more in depth.[0]
0: https://securelist.com/the-bluenoroff-cryptocurrency-hunt-is...