logo

Malicious Chrome Extension “ChatGPT Ad Blocker” Targets Users, Steals Conversations

ID: 1bb0c46a-1a17-5988-aa2e-330170331dc5

STIX ID: report--1bb0c46a-1a17-5988-aa2e-330170331dc5

Feed Name: GBHackers

Threat Score
70/100

Date Published: 2026-04-03

Date Updated: 2026-04-22

Author: Divya

...
...

This report describes a malicious Chrome extension named “ChatGPT Ad Blocker” that masquerades as an ad-blocker while capturing users' ChatGPT prompts, conversation history, and metadata, packaging them into a page_dump.html and exfiltrating them to a private Discord channel via a hardcoded webhook; investigators link the extension to a reactivated GitHub developer handle and warn that associated AI services may be compromised, recommending users avoid third-party AI add-ons and scrutinize extension permissions.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.