[LT-01]
The December 2025 Chrome Extension Breach
In December 2025, security researchers at OX Security made a disturbing discovery: two Chrome extensions had been silently stealing AI chat conversations from over 900,000 users.
One of these extensions carried Google's "Featured" badge—the supposed mark of trustworthiness.
How the Attack Worked
The malicious extensions operated with devastating simplicity:
Step 1: Legitimate Appearance
The extensions offered useful features—productiv...