A fake ChatGPT Chrome browser extension has been caught hijacking Facebook accounts, according to cybersecurity firm Malwarebytes. The extension, which is advertised as a virtual assistant powered by artificial intelligence, has over 100,000 downloads and appears to be legitimate. However, once installed, it accesses the user’s Facebook account and starts sending messages with malicious links to friends. The extension also modifies the user’s Facebook account settings to disable login notifications, allowing attackers to log in undetected. Malwarebytes has notified Google, and the extension has been removed from the Chrome Web Store. Users who have installed the extension are advised to remove it immediately and change their Facebook passwords.
Bullet points:
- A fake ChatGPT Chrome browser extension has been caught hijacking Facebook accounts, according to cybersecurity firm Malwarebytes.
- The extension is advertised as a virtual assistant powered by artificial intelligence and has over 100,000 downloads.
- Once installed, the extension accesses the user’s Facebook account and sends messages with malicious links to friends.
- The extension also modifies the user’s Facebook account settings to disable login notifications, allowing attackers to log in undetected.
- Malwarebytes has notified Google, and the extension has been removed from the Chrome Web Store.
- Users who have installed the extension are advised to remove it immediately and change their Facebook passwords.