Fake AI Chrome Extensions Steal 900K Users' Data

Malicious Chrome extensions masquerading as an AI sidebar (similar to AItopia) collected and exfiltrated full LLM conversations and extensive browser data from hundreds of thousands of users to an attacker C2 server; Ox Security documented the campaign, provided indicators of compromise, and recommends immediate removal of the extensions to mitigate exposure of proprietary code, credentials, browsing history, and other sensitive information.