PromptSnatcher Browser Extensions Abuse AI Platforms to Capture Full Chat Conversations

Gbhackers •Mayura Kathir • June 15, 2026

PromptSnatcher (internal identifier: Panel 231) is a modern, stealthy data collection operation embedded inside two browser extensions that masquerade as ad‑blockers while harvesting full chat conversations and account metadata from major AI platforms. The extensions deliver genuine ad‑blocking and cookie‑banner suppression by ingesting legitimate public filter lists such as EasyList and I Don’t Care […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

PromptSnatcher: Ad Blocker Extensions Compromise AI Chat Privacy Two Chrome extensions, 'Smart Adblocker' and 'Adblock for Browser', have been discovered to exfiltrate user prompts and responses from major AI platforms including ChatGPT, Claude, and Gemini. These extensions, masquerading as ad blockers, were installed by approximately 90,000 users. They intercept communications and send data to operator-controlled servers while also checking if users are paid subscribers on five of the eight targeted platforms. The malicious extensions share the same capture engine and payload format. Reports have been filed regarding their abuse on the Chrome Web Store, and a detailed analysis of the indicators of compromise (IOCs) has been released. The situation remains active as users are urged to remove the extensions immediately. 3 sources 69

Extracted Entities

PromptSnatcher Browser Extensions Abuse AI Platforms to Capture Full Chat Conversations

The full story

Extracted Entities

Attack Types (1)

Campaigns (1)

MITRE ATT&CK (3)