Two Chrome Extensions Caught Stealing ChatGPT and DeepSeek Chats from 900,000 Users
TL;DR
Two malicious Chrome extensions with over 900,000 users have been caught stealing ChatGPT and DeepSeek conversations and browsing data, following a similar incident with Urban VPN Proxy.
Source: The Hacker News
Cybersecurity researchers have discovered two new malicious extensions on the Chrome Web Store that are designed to exfiltrate OpenAI ChatGPT and DeepSeek conversations alongside browsing data to servers under the attackers' control. The names of the extensions, which collectively have over 900,000 users, are Chat GPT for Chrome with GPT-5, Claude Sonnet & DeepSeek AI and AI Sidebar with Deepseek, ChatGPT, Claude, and more. The findings come weeks after Urban VPN Proxy, another extension with millions of installations on Google Chrome and Microsoft Edge, was caught spying on users' chats with artificial intelligence (AI) chatbots. Full Story