Malicious ChatGPT Browser Extensions Discovered Stealing Credentials

Malicious ChatGPT Browser Extensions Discovered Stealing Credentials

First seen 28 Jan 2026, 13:07 UTC •CyberscoopGrahamcluley •29.2

Article Content

Browse articles
ThreatCluster

Security researchers have identified at least 16 malicious Chrome extensions that impersonate ChatGPT productivity tools. These extensions are designed to steal user account credentials and hijack sessions, affecting ChatGPT users who have installed them. The extensions remain available on the Chrome Web Store despite their malicious intent.

How this analysis works

Extracted Entities

1 / 2