AI chatbot-spoofing Chrome extensions facilitate data theft

Malicious actors have created 32 malicious Google Chrome extensions masquerading as ChatGPT, Google Gemini, and other AI chatbots to exfiltrate emails, API keys, and other sensitive information as part of the AiFrame campaign, The Register reports. Identical codebases and permissions have been observed across all the extensions, which have been downloaded at least 260,000 times, an analysis from LayerX Security showed.