[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fB5SVKSoSeVycBnXDn6V_WzH--n12CBRaQGLYOc7_FtY":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"status":17,"created_at":18,"published_at":19,"article":20,"tags":24,"podcasts":37},"d0c0f09a-7ac7-4ba5-a6c9-80d9f690712a","malicious-browser-extension-harvests-chatgpt-conversations","371b9c92-3bfa-485f-8c61-d4c3e94acf04","Malicious Browser Extension Harvests ChatGPT Conversations","A fake ChatGPT ad blocker extension infiltrated the official Chrome Web Store and harvested users' conversations by cloning DOM elements and exfiltrating data via Discord webhooks. The malicious extension demonstrated sophisticated evasion techniques including remote command updates from GitHub and targeting conversations longer than 150 characters. This supply chain attack highlights the risks of installing unvetted browser extensions, even from official app stores, and the need for users to verify extension legitimacy before installation.","**Immediate actions:**\n- Remove suspicious browser extensions and review installed extensions for legitimacy\n- Implement browser extension allowlisting policies in enterprise environments\n- Enable browser security features that warn about potentially malicious downloads\n\n**Long-term improvements:**\n- Establish vendor vetting procedures for all third-party software including browser extensions\n- Deploy endpoint detection solutions that monitor browser extension behavior\n- Create security awareness training focused on supply chain risks and safe browsing practices\n\n**Detection measures:**\n- Monitor network traffic for unusual data exfiltration patterns to external services\n- Implement DNS filtering to block known malicious domains associated with extension campaigns",[12,13,14,15,16],"CIS Control 2.1","CIS Control 14.6","NIST SC-18","NIST AT-2","NIST SI-3","published","2026-04-03T22:09:44.741268+00:00","2026-04-03T22:09:44.65+00:00",{"id":7,"url":21,"slug":22,"title":23},"https:\u002F\u002Fhackread.com\u002Ffake-chatgpt-ad-blocker-chrome-extension-spy-users\u002F","fake-chatgpt-ad-blocker-chrome-extension-caught-spying-on-users","Fake ChatGPT Ad Blocker Chrome Extension Caught Spying on Users",[25,31],{"id":26,"name":27,"slug":28,"description":29,"color":30},"7261eb8f-acd4-4d93-a489-7fdd652ec0ea","Security Awareness","security-awareness","Phishing, social engineering, human error","#22c55e",{"id":32,"name":33,"slug":34,"description":35,"color":36},"f0c2a0af-58aa-4128-87c9-6acd30f2dc48","Supply Chain","supply-chain","Third-party risk, compromised dependencies","#8b5cf6",[]]