Fake AI Tools in Chrome Store Are Stealing Your Personal Data
Two malicious Chrome extensions are posing as popular AI tools right now, stealing passwords and personal information from unsuspecting users.
Source
GetCyberRight Intelligence
Original headline: Fake Chrome Extensions Steal User Data
Plain-English summary by GetCyberRight. Read the full report at the source above.
What's Happening
Two dangerous Chrome extensions are currently circulating in the browser store, disguised as legitimate AI tools. One pretends to be Perplexity (a popular AI search assistant), while the other masquerades as Google Notes. Both are actively stealing user data from anyone who installs them, and they slipped past Chrome's security checks.
The Details
These fake extensions look remarkably convincing. They use similar names, logos, and descriptions to the real tools they're impersonating. Once installed, they request broad permissions to access your browsing data, which many people grant without thinking twice.
Once active, these malicious extensions can capture everything you type into websites. This includes passwords, credit card numbers, personal messages, and login credentials. They quietly send this information to criminals who can use it for identity theft, financial fraud, or selling your data on the dark web.
The extensions bypass Chrome's security because they don't contain obviously malicious code at first. Some use a technique where they download harmful components after installation, making them harder to detect during the initial review process.
Who Is Affected
Anyone who uses Chrome and has installed browser extensions recently should pay attention. This is especially concerning if you or your family members often search for productivity tools or AI assistants.
Teenagers and college students are particularly vulnerable because they frequently experiment with new productivity extensions for schoolwork. Seniors who may not recognize fake versions of tools they've heard about are also at higher risk. If anyone in your household uses Chrome regularly, this affects you.
What You Should Do Right Now
Check your Chrome extensions immediately. Click the three dots in Chrome's top right corner, go to Extensions, then Manage Extensions. Remove any extensions claiming to be "Perplexity AI" or "Google Notes" that you don't remember installing.
Stay one step ahead of scammers
Weekly cybersecurity briefings for families. No spam, just the threats that matter and what to do about them.
Review all your extensions carefully. If you don't actively use an extension or don't remember why you installed it, remove it. Fewer extensions means a smaller attack surface.
Change passwords on important accounts. Focus on email, banking, and social media accounts if you installed suspicious extensions in the past month. Use unique passwords for each account.
Enable two-factor authentication everywhere possible. This adds a critical second layer of protection even if passwords are compromised.
Check your bank and credit card statements. Look for any unauthorized transactions from the past few weeks.
The Bigger Picture
This incident highlights a growing trend: criminals are increasingly targeting browser extensions because they're powerful but often overlooked. As AI tools become more popular, scammers exploit that interest by creating fake versions of trending applications. Browser extensions have deep access to your online activity, making them attractive targets for data theft. Staying informed about these threats and regularly reviewing what's installed on your browsers is now essential digital hygiene, not optional.
How GetCyberRight Can Help
The GCR Scam Guard Extension is designed specifically to help families identify threats like these before they cause damage. It monitors your browser for suspicious extension behavior and alerts you to potential data theft attempts. Unlike the malicious extensions that hide their intentions, Scam Guard works transparently to protect your family's online safety. Think of it as having a cybersecurity expert watching over your shoulder, catching threats that slip through official security reviews.
Curated from trusted cybersecurity sources by GetCyberRight
Source: GetCyberRight IntelligenceStay ahead of cyber threats
Get our free weekly digest. Real threats, plain language, what to do about them. No spam, ever.
More articles
Fake Perplexity Extension Stole Search Data from Chrome Users
A malicious browser extension disguised as the legitimate Perplexity AI tool secretly captured users' search queries from the Chrome Web Store.
3 min readAflac Japan Breach: What 4.38M Stolen Records Mean for Your Family
A 10-day detection gap allowed hackers to steal banking details from 4.38 million Aflac Japan customers. Here's what families need to know and do right now.
4 min read
Police Now Need Warrants to Track Your Phone's Location History
A major Supreme Court ruling protects your family's privacy by requiring warrants before police can access geofence location data from tech companies.
3 min read
New 'Djinn' Hacking Tool Targets Business Cloud Accounts
Hackers are using a new tool to steal cloud and AI system login credentials from businesses through a flaw in remote support software called SimpleHelp.
2 min read