X

A fake ChatGPT Chrome extension aims to steal your Facebook account

Featured image for A fake ChatGPT Chrome extension aims to steal your Facebook account

Cybersecurity experts have uncovered a fake ChatGPT Chrome extension that does not work as it claims to. This extension posed itself as a channel to integrate ChatGPT AI functions into a user’s Google search result. That in itself seemed too good to be true, considering that Google has its own AI platform.

Despite this, some Chrome users proceeded to install this extension, hence exposing their Facebook accounts to bad actors. Truthfully, a ChatGPT Chrome extension is available for download, but there seems to be more attractive to the malware version. This harmful extension was made popular via a series of sponsored advertisements.

Advertisement
Advertisement

Due to the fuss around ChatGPT recently, many Chrome users clicked on the ad and unknowingly downloaded this malicious extension. Here is everything you need to know about this fake ChatGPT Chrome extension.

Details on how the fake ChatGPT Chrome extension affected tons of users

This fake ChatGPT Chrome extension became available for download on February 14. It masqueraded itself as the original ChatGPT4 Google extension to steal people’s Facebook accounts. To make it seem more real, the hackers that developed this malicious extension made it a copycat of the original extension.

It also had the exact functions that the ChatGPT4 extension brings, but with a twist. This malicious extension feeds on Facebook cookies curated by the target’s account (those that installed the extension). These cookies are then sent to the hacker’s server, where they are used to log into Facebook and change necessary credentials.

Sadly, this extension was on the Chrome Web Store for more than a month before it was taken down. During this period, the hackers promoted this malicious extension through ads on Chrome and other platforms. This drew lots of unsuspecting users to click on the ads and proceed to install the extension to their Chrome Web browser.

Google has proceeded to take down this extension from the Chrome Web Store, but some users have already been affected. These Chrome users lost their Facebook accounts to this fake ChatGPT Chrome extension. Now that the extension is out of the Chrome Web Store, there might be some rest for Chrome users.

If you already make use of the ChatGPT4 extension on Google Chrome, it is important to check if it is original. To do this, head over to the extension manager via the puzzle icon at the top right-hand corner of the Chrome address bar. From this point, you can check the details of the extension you have via the Chrome Web Store.