Experts Sound Alarm Over “Prompt Poaching” Browser Extensions

Security researchers observed dozens of incidents where malicious or trojanized Chrome extensions silently monitored AI/chat sessions (via API interception or DOM scraping) to collect and exfiltrate user prompts and responses; attackers used impersonation of legitimate extensions and turning legitimate extensions malicious after gaining users. The report warns of risks to intellectual property and sensitive data, cites instances of large user impact, and recommends centrally managing and auditing browser extensions, reviewing permissions, and restricting installation to approved add-ons.