260K+ Chrome Users Duped by Fake AI Browser Extensions

2026-02-17

More than 30 lookalike Chrome extensions posing as AI assistants have siphoned email, browser data, and sensitive inputs from over 260,000 users, including corporate environments. Attackers embed a full-screen iframe that proxies real LLM APIs while exfiltrating content and API keys, evading Chrome Web Store review due to minimal local permissions and off-platform malicious logic.