SlowMist has issued a security alert, warning of high-risk phishing activities targeting TRON users. Attackers are forging the TronLink Chrome extension and using Unicode bidirectional control characters and Cyrillic homoglyphs to impersonate the official name, tricking users into installing malicious plugins. These plugins dynamically load phishing pages via remote iframes, enabling the theft of mnemonic phrases, private keys, Keystore files, and passwords, with data being sent back in real-time via Telegram Bot. Users are advised to uninstall suspicious extensions. https://(wublock123.com)/news/slow-fog-warning-high-risk-phishing-activity-targeting-tron-users-detected-60850