That AI Extension Helping You Write Emails? It’s Reading Them First

Unit 42 researchers identified 18 malicious Chrome extensions disguised as AI productivity tools. These extensions employ techniques including RATs with WebSocket C2 channels, adversary-in-the-browser DOM scraping (e.g., reading Gmail content), infostealers harvesting AI API keys and personal data, search hijackers with cross-device persistent tracking, brand impersonation, and spyware using proxy auto-configuration scripts. Notably, threat actors are using LLMs to accelerate malware production. All 18 extensions were reported to Google, which removed or warned the publishers. Users are advised to scrutinize extension permissions and only install from trusted sources.