{"data":{"id":"df9c0fa6-6f01-488f-a837-e92ef973a95b","title":"Fake AI Chrome extensions with 300K users steal credentials, emails","summary":"Over 30 fake AI assistant Chrome extensions with more than 300,000 total users are stealing user credentials, emails, and browsing data by pretending to be AI tools. The extensions, collectively called AiFrame, don't actually run AI locally; instead, they load content from remote servers they control, allowing attackers to intercept sensitive information like Gmail messages and authentication details without users knowing.","solution":"The source recommends checking LayerX's list of indicators of compromise to identify if you have installed any malicious extensions. If compromise is confirmed, users should reset passwords for all accounts.","labels":["security","privacy"],"sourceUrl":"https://www.bleepingcomputer.com/news/security/fake-ai-chrome-extensions-with-300k-users-steal-credentials-emails/","publishedAt":"2026-02-12T13:41:55.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["pii_leakage","data_extraction"],"issueType":"news","affectedPackages":null,"affectedVendors":["Google"],"affectedVendorsRaw":["Google Chrome","Gmail","Gemini","ChatGPT"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":null,"llmSpecific":false,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":null}}