Every public data breach

44 disclosed this week · 26,355 on record

FakeGPT 'ChatGPT for Google' Chrome extension

Disclosed Mar 23, 2023Unverified

Fake ChatGPT browser extension hijacked Facebook accounts via stolen session cookies

Guardio Labs found a copy of the open-source ChatGPT for Google extension, promoted through Google search ads and listed on the Chrome Web Store, that worked as advertised but stole Facebook session cookies to take over users' accounts.

What is known

People affectedNot stated in the sources we have
DisclosedMar 23, 2023
AttackSupply chain
Data exposedCredentials and tokens
SectorTech
StatusUnverified: not yet confirmed by an official notice, a filing or the organization

Sources

Notices filed

History of this record
Added2026-09-25
First recordedby seedSource

First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.

Everything about FakeGPT 'ChatGPT for Google' Chrome extension