Chrome Extension Steals AI Prompts from 100k Users Across Multiple Platforms

A Chrome extension named 'Prompt Optimizer - SecondBrain' has been found to collect user prompts and AI responses without user interaction. The extension, which has approximately 100,000 installations, operates silently on nine AI platforms, including ChatGPT and Claude. It captures data by running a capture engine at document_start and sending POST requests to a vendor endpoint. Despite claiming no data collection in its privacy declaration, the extension has been confirmed to store user credentials and transmit sensitive information. Users are at risk of their AI interactions being harvested without consent. The extension's malicious behavior was reproduced on a clean profile without any direct user engagement. Security researchers are currently investigating the implications of this extension.

Key Points: • The 'SecondBrain' extension collects prompts and responses from users without interaction. • It has around 100,000 users and operates across nine major AI platforms. • Despite claiming no data collection, the extension actively transmits sensitive user data.