Here Are 16 Browser Extensions Hackers Are Using to Steal Data of Pakistanis

The National Telecom and Information Technology Security Board has issued a cybersecurity advisory against hackers targeting Pakistanis who use browser extensions like ChatGPT-4, Gemini for Chrome, and over a dozen other tools to steal private data of Pakistanis.

The advisory warns users, particularly those relying on virtual private networks (VPNs) and artificial intelligence, of increased risks from hackers employing fake techniques to inject malicious code.

The advisory states that malicious code is sent through phishing techniques in order to compromise targeted publishers of legitimate extensions to steal users’ PII using said extensions. At least 16 common extensions (including VPNs and AI ChatBots) are suspected to be compromised:

1. AI Assistant – ChatGPT and Gemini for Chrome
2. Bard AI Chat Extension
3. GPT 4 Summary with OpenAI
4. Search CoPilot AI Assistant for Chrome
5. Wayin AI
6. VPNCity
7. Internet VPN
8. Vidniz Flex Video Recorder
9. VidHelper Video Downloader
10. Bookmark Favicon Changer
11. UVoice
12. Reader Mode
13. Parrot Talks
14. Primus
15. Trackker – Online Keylogger Tool
16. AI Shop Buddy
17. Rewards Search Automation etc.

The advisory recommends to:

• Avoid the above-mentioned extensions for the time being and use alternate well-reputed options
• Only install trusted extensions
• Read and review permissions and ratings
• Limit permissions where possible
• Regularly update extensions
• Remove unused extensions
• Use well-reputed and licensed ANtivirus software
• Be wary of free extensions
• Actively monitor system utilities and data usage for abnormal activity.