Chrome Extensions Impersonate AI Tools to Steal ChatGPT & DeepSeek Chats

Security researchers uncovered two malicious Chrome extensions posing as AI sidebar tools that were downloaded roughly 900,000 times and secretly collected AI chat conversations, full URLs, search queries, and session metadata by inspecting page DOMs and exfiltrating data in batches to attacker-controlled domains; the report includes technical IOCs (extension IDs, SHA-256 hashes, and C2 domains) and remediation guidance to remove extensions and monitor browser-based threats.