Skip to content
Poper Blocker Ad-Blocker Found to Exfiltrate User Data

Poper Blocker Ad-Blocker Found to Exfiltrate User Data

First seen 2 Oct 2026, 15:07 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 2, 2026 at 15:08 UTC
  • •Poper Blocker has over 2 million downloads and is rated 4.8 stars.
  • •The extension collects extensive user data, including browsing history and AI chat logs.
  • •Google has not acted on reports of Poper Blocker's malicious behavior despite prior warnings.

Poper Blocker, an ad-blocking browser extension available on the Chrome Web Store, has been reported to exfiltrate sensitive user data, including browsing history and AI chat interactions. The extension, which claims over 2 million active users and has a 4.8-star rating, has been flagged by researchers at Bay Area Labs for employing malware techniques such as code obfuscation and sandbox evasion. Despite being reported to Google in May 2026, no action has been taken against it. The app's data collection practices violate Chrome Web Store policies, which prohibit the collection of browsing data without explicit user consent. Users are potentially exposed to significant privacy risks as the app can also take screenshots and gather detailed information about their online activities. This incident highlights the ongoing issue of malicious extensions masquerading as legitimate applications in popular app stores.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-05-01
Poper Blocker reported to Google
Bay Area Labs reported Poper Blocker to Google for data exfiltration concerns, but no action was taken.
Darkreading
2026-09-28
Dark Reading publishes findings
Dark Reading reported on Poper Blocker's data exfiltration techniques and its presence on the Chrome Web Store.
Darkreading
2026-10-02
Am I Being Pwned publishes analysis
Am I Being Pwned detailed the methods used by Poper Blocker to exfiltrate user data, emphasizing its malicious nature.
amibeingpwned.com

More articles in this cluster (2)

Following this threat?

Track Poper Blocker and Bay Area Labs in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (11)

1 / 4

Common questions

What data does Poper Blocker collect?
Poper Blocker collects browsing history, AI chat logs, and can take screenshots of user activity.
Has Google taken action against Poper Blocker?
No, despite being reported in May 2026, Google has not acted against Poper Blocker.
How can users protect themselves from such extensions?
Users should review permissions of browser extensions and avoid those that request excessive data access.