Fake GPT Chrome extension steals Facebook session cookies, breaks into accounts • Graham Cluley

Fake GPT Chrome extension steals Facebook session cookies and compromises accounts

The world has gone into ChatGPT madness.

Almost everyone is talking about it. You’re not talking because you’re too busy getting your ChatGPT to finish your homework or crafting the perfect email to your boss explaining why you deserve a raise.

Although there are dangers. Inevitably, all this hype around an extraordinary AI chatbot will pique the interest of those who haven’t had the chance to try it yet. And those folks might want an easy way to step into the dystopian artificial intelligence hell that seems to be around the corner.

e-mailsign up for newsletter
Security news, advice and tips.

So what if you don’t know how to access ChatGPT?

You can use our trusted search engine to find out how to access ChatGPT.

And that’s the first risk. Because cyber criminals have polluted his Google search results with malicious web pages and sponsored ads pointing to fake browser extensions. Claim It provides instant, user-friendly access to ChatGPT, but is actually a cover for doing more malicious things.

As explained by a security researcher from Guardio Labs, scammers managed to embed a fraudulent browser extension in the official Chrome store claiming to be for “Chat GPT 4”.

google extension chat gpt

Malicious extensions then steal Facebook-related cookies from your computer and silently pass them on to hackers. Hackers can take control of your business’s Facebook page.

Once they gain access to your company’s Facebook account, they can change their password (locking out the real owner) and hijack your business’s official Facebook page to expose disinformation, fraud, and spam. , and so on, to spread virtually anything the hacker wants.

Google said it has removed the extension from the Chrome Web Store and removed malicious ads from search results. However, it wouldn’t be surprising if similar attempts were made to exploit his ChatGPT interest sooner or later.

Remember – browser extensions and add-ons are very powerful. Installing a rogue extension can compromise everything you do in your browser.

Did you find this article interesting? Follow Graham Cluley on Twitter Or you can read more exclusive content we post on Mastodon.


Graham Cluley is a veteran of the antivirus industry and has worked for many security companies since the early 1990s when he created the first version of Dr. Solomon’s Antivirus Toolkit for Windows. He is now an independent security he analyst, makes regular media appearances and speaks internationally on the topics of computer he security, hackers and online he privacy. Follow him on Twitter. @gcluleyMastodon@@[email protected]or drop him an email.



Source link

Leave a Reply

Your email address will not be published. Required fields are marked *