These Commonly Used Browser Extensions Are Stealing Personal Data: NTISB

The National Telecommunication and Information Security Board (NTISB) has issued a cybersecurity advisory warning users about a new attack campaign targeting widely used browser extensions.

Hackers have reportedly compromised multiple extensions to steal personal information and credentials used on various platforms, including social media and banking websites. The attack involves malicious code injected through phishing techniques, compromising legitimate extension publishers to access users’ sensitive data.

According to technical details provided in the advisory, at least 16 common browser extensions have been identified as potentially compromised. These include AI-powered tools and more.

• AI Assistant – ChatGPT and Gemini for Chrome
• Bard AI Chat Extension
• GPT 4 Summary with OpenAI
• VPNCity
• Internxt VPN
• Vidniz Flex Video Recorder
• VidHelper Video Downloader

Additionally, extensions related to bookmarking, voice services, reading modes, and automation tools have also been listed.

In response to this security threat, the advisory has provided several recommendations for users to ensure safe browsing practices. It strongly advises against using the compromised extensions and suggests opting for well-reputed alternatives. Users are urged to install only trusted extensions, carefully review permissions and ratings, and limit permissions where possible to reduce security risks.

To further enhance security, the advisory recommends keeping all browser extensions updated and removing any that are not actively in use. It also stresses the importance of using well-reputed and licensed antivirus software to detect and prevent potential cyber threats. Users are advised to be cautious when installing free extensions, as they often pose higher security risks.

Additionally, the advisory highlights the need for continuous monitoring of system utilities and data usage for any abnormal activity. This precaution can help identify potential security breaches and unauthorized access at an early stage. The NTISB urges all users to remain vigilant and follow these cybersecurity guidelines to protect their personal information from potential threats.