Malicious Chrome Extensions Steal AI Chat Data: A Privacy Concern for Millions
The Threat Unveiled
In a chilling revelation, cybersecurity researchers have uncovered two malicious extensions on the Chrome Web Store that have collectively swindled the conversations of over 900,000 users from AI platforms like ChatGPT and DeepSeek.
- The extensions, with IDs fnmihdojmnkclgjpcoonokmkhjpjechg and inhcgfpbfdjbjogdfjbclgolkmhnooop, have been covertly exfiltrating user conversations and browsing data to servers under the attackers' control.
- These extensions have been active for some time, with the first one boasting a user base of 600,000, and the second amassing 300,000 users.
The Implication
This disturbing tactic of using browser extensions to surreptitiously capture AI conversations, codenamed "Prompt Poaching" by Secure Annex, poses a significant threat to user privacy. The extensions have been found to impersonate a legitimate extension named "Chat with all AI models (Gemini, Claude, DeepSeek...) & AI Agents" from AITOPIA.
It is crucial to note that such incidents could have far-reaching implications, not just for individual users but also for the broader AI community. The stolen data could potentially be used to train rival AI models, leading to a competitive advantage or even unintended biases.
A Northeast Perspective
While the users affected by this breach are predominantly from global locations, the potential implications for Northeast India and the broader Indian context are not insignificant. As AI adoption continues to grow in India, it is essential to prioritize cybersecurity measures to safeguard sensitive data and maintain trust in AI-driven services.
The Way Forward
Users who have installed these extensions are advised to remove them from their browsers and refrain from installing extensions from unknown sources, even if they have the "Featured" tag on them. This incident serves as a stark reminder that user privacy and security should be paramount when utilizing AI platforms and browser extensions.