logo

Malicious Chrome extensions can spy on your ChatGPT chats

ID: 480061b1-65e3-57ca-86a9-b1ffb853243a

STIX ID: report--480061b1-65e3-57ca-86a9-b1ffb853243a

Feed Name: Malwarebytes Blog

Threat Score
60/100

Date Published: 2026-01-28

Date Updated: 2026-04-28

...
...

**Malicious browser extension campaign stealing ChatGPT session tokens:** Researchers discovered 16 deceptive Chrome/Edge extensions (≈900 downloads) that siphon users' ChatGPT session tokens and metadata to attacker backends, enabling account takeover, access to conversation history, profiling, and persistent access; the report lists extension names and IDs for removal and notes platform owners have been informed.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.