Malicious Chrome Extension “ChatGPT Ad Blocker” Steals ChatGPT Conversations
ID: cd6395eb-2932-517c-8b09-f4b44e2f233c
STIX ID: report--cd6395eb-2932-517c-8b09-f4b44e2f233c
Feed Name: cybersecurityNews.com
Security researchers identified a malicious Chrome extension named “ChatGPT Ad Blocker” that, instead of blocking ads, injects a script on the ChatGPT site to clone pages, strip styling, capture conversation text, save it as page_dump.html, and post it to a private Discord webhook. The extension periodically fetches remote configuration from a GitHub repository (bypassing cache) enabling remote control of its behavior; the developer alias and linked AI services are suspicious, and users are advised to distrust ad‑blocking extensions for high‑value sites and avoid third‑party intermediaries.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
