A malicious campaign of 30 Chrome extensions masquerading as AI assistants has infected over 300,000 users, stealing credentials, email content, and browsing data[1]. The extensions, dubbed “AiFrame” by LayerX researchers, share common infrastructure under the domain tapnetic[.]pro and use iframes to load remote content rather than implementing actual AI functionality[1:1].
Popular malicious extensions still available on the Chrome Web Store include:
- AI Sidebar (70,000 users)
- AI Assistant (60,000 users)
- ChatGPT Translate (30,000 users)
- AI GPT (20,000 users)
The extensions specifically target Gmail data through content scripts that extract email content, drafts, and thread text. They can also capture voice recordings using Web Speech API and transmit data to remote servers controlled by the operators[1:2].
for the most part if your using Chrome you don’t care about your privacy anyway …
Most users don’t know, care, or understand why Chrome and Google are bad. There’s also a big difference between Google collecting your data and malicious actors stealing your data and using it to rob you or target you for other scams.
