Hundreds of popular add‑ons used encrypted, URL‑sized payloads to send search queries, referrers, and timestamps to outside servers, in some cases tied to data brokers and unknown operators. An ...

With more than 37 million combined downloads, the extensions expose users to tracking and personal information theft. Security researchers have discovered more than 300 Chrome extensions that leak ...

A set of 30 malicious Chrome extensions that have been installed by more than 300,000 users are masquerading as AI assistants to steal credentials, email content, and browsing information. Some of the ...

Cybersecurity researchers have discovered malicious Google Chrome extensions that come with capabilities to hijack affiliate links, steal data, and collect OpenAI ...

Malicious Google Chrome extensions have stolen large language model (LLM) conversations and browser data from hundreds of thousands of users. Application security vendor Ox Security detailed a ...

Impersonating a legitimate extension from AITOPIA, the two malicious extensions were also exfiltrating users’ browser activity. The applications, called ‘Chat GPT for Chrome with GPT-5, Claude Sonnet ...

900,000 Users Hit as Malicious Chrome Extensions Steal ChatGPT, DeepSeek Chats Your email has been sent OX Security researchers found that more than 900,000 Chrome ...

Chrome extensions are supposed to make your browser more useful, but they've quietly become one of the easiest ways for attackers to spy on what you do online. Security researchers recently uncovered ...

Ben Khalesi writes about where artificial intelligence, consumer tech, and everyday technology intersect for Android Police. With a background in AI and Data Science, he’s great at turning geek speak ...

I built 10 simple, secure Chrome extensions to fix everyday browsing gaps, from quick notes and site shortcuts to clean copy, per-site tasks, highlights, temp snippets, dummy passwords, quick IDs, and ...

In late December 2024, researchers discovered more than 30 browser extensions hosted on the Google Chrome Web Store that were thought to be malicious. Of the 30+ extensions, 20 stole credentials and ...