Chrome Extensions With 900,000 Downloads Caught Stealing AI Chats

Two malicious Chrome extensions, impersonating a legitimate AITOPIA addon, were observed gathering more than 900,000 downloads while secretly exfiltrating users’ conversations with ChatGPT and DeepSeek, according to OX Security. The extensions—called “Chat GPT for Chrome with GPT-5, Claude Sonnet & DeepSeek AI” and “AI Sidebar with Deepseek, ChatGPT, Claude and more”—were no longer available in the Chrome Web Store at the time SecurityWeek covered the story.

OX Security notes that the attackers used Lovable to host infrastructure components and anonymise activity, while the extensions pretended to harvest “anonymous, non-identifiable analytics data” but actually captured complete ChatGPT and DeepSeek conversations. They reportedly collected all URLs from Chrome tabs, search queries, URL parameters containing session tokens, user IDs and other authentication data, potentially leaking internal corporate domains and tools.

Depending on interaction with the LLM models, the extensions could have exfiltrated source code, development queries, PII and confidential information, enabling risks such as corporate espionage or targeted phishing; users are urged to remove the extensions promptly. According to SecurityWeek, the article was published on 7 January 2026.