Malicious AI sidebar Chrome extensions
Disclosed Dec 30, 20258 months agoUnverified
Two Chrome AI sidebar extensions with 900,000 users stole ChatGPT and DeepSeek chats
OX Security found two Chrome extensions impersonating AITOPIA's AI sidebar, one with a Featured badge and over 600,000 users and another with over 300,000, that sent full ChatGPT and DeepSeek conversations and all open tab URLs to a remote server every 30 minutes.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Dec 30, 2025 |
| Attack | Supply chain |
| Data exposed | Prompts and chats, Messages, Other |
| Sector | Tech |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
Sources
| Source | |
|---|---|
| Malicious Chrome Extensions Steal ChatGPT Conversationsox.security · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Dec 30, 2025 |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.