LayerX Discovers Malicious Chrome Extensions Stealing ChatGPT Accounts

Researchers discovered a coordinated campaign of 16 malicious browser extensions (15 via Chrome Web Store, 1 via Microsoft Edge add-ons) that inject content scripts into chatgpt.com to intercept session tokens from authorization headers and exfiltrate them to attacker-controlled servers, enabling account-level access to ChatGPT conversations and connected services; the activity is part of a broader, ongoing trend of AI-focused malicious extensions and browser-based data-exfiltration campaigns.