logo

“ChatGPT Ad Blocker” Extension Caught Harvesting Your Private Conversations

ID: 3e2fff36-7422-51c0-9eb6-bd7aeecf83bd

STIX ID: report--3e2fff36-7422-51c0-9eb6-bd7aeecf83bd

Feed Name: securityonline.info

Threat Score
70/100

Date Published: 2026-04-02

Date Updated: 2026-04-23

Author: Ddos

...
...

DomainTools researchers uncovered a malicious Chrome extension, “ChatGPT Ad Blocker,” on the Chrome Web Store that clones the ChatGPT page DOM, preserves conversation text (redacting only very long nodes), bundles the data into a page dump, and sends it to a hardcoded Discord webhook (received by a bot named “Captain Hook”). The extension is linked to the GitHub ID krittinkalra—also tied to AI platforms AI4ChatCo and Writecream—raising concerns that similar data-harvesting malware could exist in those services.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.