[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fgasgz0gndE1awXt0mJDs4-pnPyXgOkjT7ye8m7nhyPk":3},{"article":4,"iocs":52,"watch_terms":56,"solutions":57,"lesson":145},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":29,"category":30,"article_tags":34},"af4e680a-70f5-4f06-a449-81888e76f0ff","Extension Banned for Stealing AI Chats Returns to Chrome Store, Resumes Malicious Activities","extension-banned-for-stealing-ai-chats-returns-to-chrome-store-resumes-malicious-b5a6e3","The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data. The post Extension Banned for Stealing AI Chats Returns to Chrome Store, Resumes Malicious Activities appeared first on SecurityWeek.","A Chrome extension previously removed for stealing AI conversations has reappeared on the Chrome Web Store. Initially flagged for scraping ChatGPT and DeepSeek data, the extension now employs a monetization scheme that triggers affiliate link clicks on update or uninstall events, routing users to an AI video-generation platform. Security researchers warn that the same distribution channel could be used for more harmful payloads in the future.","Malicious Chrome extension returns to store, now uses affiliate links for monetization.","https:\u002F\u002Fwww.securityweek.com\u002Fextension-banned-for-stealing-ai-chats-returns-to-chrome-store-resumes-malicious-activities\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2024\u002F06\u002FChrome.jpeg","2026-08-11T11:15:15+00:00","2026-08-11T12:00:24.510544+00:00",8,[17,20,23,25,27],{"name":18,"type":19},"Chrome","product",{"name":21,"type":22},"Google","vendor",{"name":24,"type":19},"AI Sidebar with DeepSeek, ChatGPT, Claude and more",{"name":26,"type":22},"DeepSeek AI",{"name":28,"type":22},"Netskope","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":29,"icon":31,"name":32,"slug":33},null,"Malware","malware",[35,40,42,47],{"category":36},{"id":37,"icon":31,"name":38,"slug":39},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":41},{"id":29,"icon":31,"name":32,"slug":33},{"category":43},{"id":44,"icon":31,"name":45,"slug":46},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",{"category":48},{"id":49,"icon":31,"name":50,"slug":51},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[53],{"type":33,"value":54,"context":55},"Trojan.GenericFCA.Script.37952","Netskope's classification for the malicious extension's payload.",[21,26,28],{"controls":58,"vendors":136},[59,80,107],{"slug":60,"name":61,"problem":62,"products":63},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",[64,72],{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"slug":51,"name":81,"problem":82,"products":83},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[84,92,100],{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"recorded-future","Recorded Future","\u002Fvendor-logos\u002Frecorded-future.png","recorded-future-cyber-operations","Recorded Future Cyber Operations","https:\u002F\u002Fwww.recordedfuture.com\u002Fproducts\u002Fcyber-operations","Threat intelligence built into security operations workflows, to prioritise alerts and act on threats before they arrive.",{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"dataminr","Dataminr","\u002Fvendor-logos\u002Fdataminr.png","dataminr-threat-intelligence","Dataminr Threat Intelligence","https:\u002F\u002Fwww.dataminr.com\u002Fproducts\u002Fcyber-defense\u002Fthreat-intelligence\u002F","Real-time alerts on emerging cyber threats, exploited vulnerabilities and attacks relevant to your organisation, detected with AI across a large set of public data sources.",{"vendor_slug":101,"vendor_name":21,"vendor_logo":102,"product_slug":103,"product_name":104,"url":105,"description":106},"google","\u002Fvendor-logos\u002Fgoogle.png","google-threat-intelligence","Google Threat Intelligence","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fproducts\u002Fthreat-intelligence","Threat intelligence from Mandiant's frontline investigations, Google's threat analysts, open sources and Google's own visibility, in one service.",{"slug":108,"name":109,"problem":110,"products":111},"ai-security","AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[112,120,128],{"vendor_slug":113,"vendor_name":114,"vendor_logo":115,"product_slug":116,"product_name":117,"url":118,"description":119},"hiddenlayer","HiddenLayer","\u002Fvendor-logos\u002Fhiddenlayer.png","hiddenlayer-ai-security","HiddenLayer AI Security Platform","https:\u002F\u002Fhiddenlayer.com\u002F","Model scanning, AI red teaming and runtime protection for AI applications.",{"vendor_slug":121,"vendor_name":122,"vendor_logo":123,"product_slug":124,"product_name":125,"url":126,"description":127},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","ai-defense","Cisco AI Defense","https:\u002F\u002Fwww.cisco.com\u002Fsite\u002Fus\u002Fen\u002Fproducts\u002Fsecurity\u002Fai-defense\u002Findex.html","Discovery of AI use, testing of models and guardrails for AI applications.",{"vendor_slug":129,"vendor_name":130,"vendor_logo":131,"product_slug":132,"product_name":133,"url":134,"description":135},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","prisma-airs","Prisma AIRS","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fai-security\u002Fprisma-airs","Security for AI applications, models and agents, including runtime protection against prompt injection.",[137,140],{"slug":101,"name":21,"logo_path":102,"roles":138},[139],"affected",{"slug":141,"name":28,"logo_path":142,"roles":143},"netskope","\u002Fvendor-logos\u002Fnetskope.png",[144],"reported_by",{"slug":146,"title":147,"body":148,"framework_refs":149,"framework_notes":158},"banned-chrome-extension-returns-to-steal-data-and-hijack-clicks","Banned Chrome Extension Returns to Steal Data and Hijack Clicks","A malicious Chrome extension that was previously removed for scraping sensitive AI conversations managed to reappear on the Chrome Web Store, demonstrating a critical weakness in third-party software vetting and platform enforcement. The extension shifted tactics from outright data theft to a covert affiliate monetization scheme, showing how threat actors adapt to evade detection while maintaining a persistent presence. This matters because users who trust official distribution channels like the Chrome Web Store may install extensions believing they have been vetted for safety. The incident highlights how supply chain risks extend to browser ecosystems, where a seemingly benign update can introduce or reactivate harmful behavior at any time.",[150,151,152,153,154,155,156,157],"CIS Control 2: Inventory and Control of Software Assets","CIS Control 9: Email and Web Browser Protections","NIST SP 800-53 CM-7: Least Functionality","NIST SP 800-53 SA-12: Supply Chain Protection","NIST SP 800-53 SI-3: Malicious Code Protection","GDPR Article 32: Security of Processing (data exfiltration risk)","NIST Cybersecurity Framework DE.CM-7: Monitoring for Unauthorized Software","ITIL: Change Management — Third-Party Software Vetting",{}]