{"id":2304,"date":"2026-02-02T15:49:04","date_gmt":"2026-02-02T23:49:04","guid":{"rendered":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/?p=2304"},"modified":"2026-02-02T15:49:48","modified_gmt":"2026-02-02T23:49:48","slug":"malicious-browser-extensions-that-steal-your-data","status":"publish","type":"post","link":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/2026\/02\/02\/malicious-browser-extensions-that-steal-your-data\/","title":{"rendered":"Malicious browser extensions that steal your data"},"content":{"rendered":"\n<p><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"913\" height=\"255\" src=\"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-content\/uploads\/sites\/4983\/2026\/01\/image-7.png\" alt=\"\" class=\"wp-image-2305\" srcset=\"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-content\/uploads\/sites\/4983\/2026\/01\/image-7.png 913w, https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-content\/uploads\/sites\/4983\/2026\/01\/image-7-300x84.png 300w, https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-content\/uploads\/sites\/4983\/2026\/01\/image-7-768x215.png 768w\" sizes=\"auto, (max-width: 913px) 100vw, 913px\" \/><\/figure>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>Chat GPT for Chrome with GPT-5, Claude Sonnet &amp; DeepSeek AI<\/p>\n\n\n\n<p>AI Sidebar with Deepseek, ChatGPT, Claude and more.<\/p>\n<\/blockquote>\n\n\n\n<p>This is another example of threat actors weaponizing apps. These browser extensions were previously available for download in web stores (now removed). They pretend to be legitimate but were exfiltrating sensitive and personal ChatGPT, DeepSeek and browser related data once installed. If you have installed these or require assistance to establish the authenticity of an extension or app, reach out to the helpdesk or your IT support team. <\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Note the icons are not the actual logo for any of those companies. Avoid installing unknown extensions, you can verify by checking on their website. <\/li>\n\n\n\n<li>Check the extension&#8217;s developer info before installing, verify that it is provided by the company it claims to be.<\/li>\n\n\n\n<li>Avoid uploading sensitive or personal information to chat models that are not the UVic compliant Copilot environment.<\/li>\n\n\n\n<li>Important information on the use of AI can be found here: <a href=\"https:\/\/www.uvic.ca\/campus\/artificial-intelligence\/index.php\">https:\/\/www.uvic.ca\/campus\/artificial-intelligence\/index.php<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Chat GPT for Chrome with GPT-5, Claude Sonnet &amp; DeepSeek AI AI Sidebar with Deepseek, ChatGPT, Claude and more. This is another example of threat actors weaponizing apps. These browser extensions were previously available for download in web stores (now removed). They pretend to be legitimate but were exfiltrating sensitive and personal ChatGPT, DeepSeek and &hellip; <a href=\"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/2026\/02\/02\/malicious-browser-extensions-that-steal-your-data\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Malicious browser extensions that steal your data<\/span><\/a><\/p>\n","protected":false},"author":19355,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"image","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-2304","post","type-post","status-publish","format-image","hentry","category-uncategorized","post_format-post-format-image"],"_links":{"self":[{"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/posts\/2304","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/users\/19355"}],"replies":[{"embeddable":true,"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/comments?post=2304"}],"version-history":[{"count":4,"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/posts\/2304\/revisions"}],"predecessor-version":[{"id":2310,"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/posts\/2304\/revisions\/2310"}],"wp:attachment":[{"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/media?parent=2304"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/categories?post=2304"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/onlineacademiccommunity.uvic.ca\/phishbowl\/wp-json\/wp\/v2\/tags?post=2304"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}