“ChatGPT Ad Blocker” Extension Caught Harvesting Your Private Conversations
ID: 3e2fff36-7422-51c0-9eb6-bd7aeecf83bd
STIX ID: report--3e2fff36-7422-51c0-9eb6-bd7aeecf83bd
Feed Name: securityonline.info
DomainTools researchers uncovered a malicious Chrome extension, “ChatGPT Ad Blocker,” on the Chrome Web Store that clones the ChatGPT page DOM, preserves conversation text (redacting only very long nodes), bundles the data into a page dump, and sends it to a hardcoded Discord webhook (received by a bot named “Captain Hook”). The extension is linked to the GitHub ID krittinkalra—also tied to AI platforms AI4ChatCo and Writecream—raising concerns that similar data-harvesting malware could exist in those services.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
