Google Chrome AI extensions deliver info-stealing malware in broad attack

Researchers discovered a campaign that took over at least 36 third-party Google Chrome extensions (many impersonating AI and VPN tools) used by about 2.6 million users, and pushed fraudulent updates that install info-stealing malware—reportedly targeting Facebook Ads account data. Some compromised extensions were removed from the Chrome Web Store, but others remain under attacker control; organizations are advised to restrict or block third-party extensions for work and warn employees until fixes are available.