Malicious Chrome extensions disguised as AI assistants steal data from 300,000+ users
More than 30 malicious Chrome extensions posing as AI assistants have infected over 300,000 users, stealing passwords, emails, and browsing data. Discovered by LayerX Security and dubbed the AiFrame campaign, these extensions impersonate ChatGPT, Claude, Gemini, and other popular AI tools while extracting sensitive information through hidden iframe overlays. Many remain available on the Chrome Web Store despite ongoing reports.