Skip to content

FakeGPT 'ChatGPT for Google' Chrome extension

Disclosed Mar 23, 20233 years agoUnverified

Fake ChatGPT browser extension hijacked Facebook accounts via stolen session cookies

Guardio Labs found a copy of the open-source ChatGPT for Google extension, promoted through Google search ads and listed on the Chrome Web Store, that worked as advertised but stole Facebook session cookies to take over users' accounts.

What is known

People affectedNot stated in the sources we have
DisclosedMar 23, 2023
AttackSupply chain
Data exposedCredentials and tokens
SectorTech
StatusUnverified: not yet confirmed by an official notice, a filing or the organization

Sources

Source
Fake ChatGPT for Google extension hijacks Facebook accountshelpnetsecurity.com · News

Notices filed

WhereFiledPeople
ResearchtotalMar 23, 2023
History of this record
  • 2026-09-25 · added · seed source

First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.

Everything about FakeGPT 'ChatGPT for Google' Chrome extension

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.