40 malicious Firefox add-ons targeted crypto wallets, and 9 began as sports-score tools August 26, 2026