{"id":10661,"date":"2026-02-14T10:03:46","date_gmt":"2026-02-14T10:03:46","guid":{"rendered":"https:\/\/serisec.com\/index.php\/2026\/02\/14\/malicious-chrome-ai-extensions-attacking-260000-users-via-injected-iframes\/"},"modified":"2026-02-14T10:03:46","modified_gmt":"2026-02-14T10:03:46","slug":"malicious-chrome-ai-extensions-attacking-260000-users-via-injected-iframes","status":"publish","type":"post","link":"https:\/\/serisec.com\/index.php\/2026\/02\/14\/malicious-chrome-ai-extensions-attacking-260000-users-via-injected-iframes\/","title":{"rendered":"Malicious Chrome AI Extensions Attacking 260,000 Users via Injected IFrames"},"content":{"rendered":"

Malicious Chrome AI Extensions Attacking 260,000 Users via Injected IFrames
\n \t

\n
<\/BR>
\n
\n \t

\n
<\/BR><\/p>\n

\n

A coordinated campaign is using malicious Chrome extensions<\/a> that impersonate popular AI tools like ChatGPT, Claude, Gemini, and Grok.<\/p>\n

These fake \u201cAI assistants\u201d spy on users through injected, remote-controlled iframes, turning helpful browser add-ons into surveillance tools. More than 260,000 users have installed these extensions.<\/p>\n

Security researchers identified at least 30 Chrome extensions promoted as AI tools for summarizing, chatting, translating, generating images, and boosting Gmail productivity<\/a>.<\/p>\n

Although they use different names and icons, they share the same codebase, permissions, and backend infrastructure, confirming a single organized operation.<\/p>\n

Some extensions were even marked as \u201cFeatured\u201d in the Chrome Web Store, increasing trust and downloads.<\/p>\n

Here is the malicious extensions table in a clean format:<\/p>\n

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Extension ID<\/th>\nName<\/th>\nInstalls<\/th>\n<\/tr>\n<\/thead>\n
nlhpidbjmmffhoogcennoiopekbiglbp<\/td>\nAI Assistant<\/td>\n50,000<\/td>\n<\/tr>\n
gcfianbpjcfkafpiadmheejkokcmdkjl<\/td>\nLlama<\/td>\n147<\/td>\n<\/tr>\n
fppbiomdkfbhgjjdmojlogeceejinadg<\/td>\nGemini AI Sidebar<\/td>\n80,000<\/td>\n<\/tr>\n
djhjckkfgancelbmgcamjimgphaphjdl<\/td>\nAI Sidebar<\/td>\n9,000<\/td>\n<\/tr>\n
llojfncgbabajmdglnkbhmiebiinohek<\/td>\nChatGPT Sidebar<\/td>\n10,000<\/td>\n<\/tr>\n
gghdfkafnhfpaooiolhncejnlgglhkhe<\/td>\nAI Sidebar<\/td>\n50,000<\/td>\n<\/tr>\n
cgmmcoandmabammnhfnjcakdeejbfimn<\/td>\nGrok<\/td>\n261<\/td>\n<\/tr>\n
phiphcloddhmndjbdedgfbglhpkjcffh<\/td>\nAsking Chat Gpt<\/td>\n396<\/td>\n<\/tr>\n
pgfibniplgcnccdnkhblpmmlfodijppg<\/td>\nChatGBT<\/td>\n1,000<\/td>\n<\/tr>\n
nkgbfengofophpmonladgaldioelckbe<\/td>\nChat Bot GPT<\/td>\n426<\/td>\n<\/tr>\n
gcdfailafdfjbailcdcbjmeginhncjkb<\/td>\nGrok Chatbot<\/td>\n225<\/td>\n<\/tr>\n
ebmmjmakencgmgoijdfnbailknaaiffh<\/td>\nChat With Gemini<\/td>\n760<\/td>\n<\/tr>\n
baonbjckakcpgliaafcodddkoednpjgf<\/td>\nXAI<\/td>\n138<\/td>\n<\/tr>\n
fdlagfnfaheppaigholhoojabfaapnhb<\/td>\nGoogle Gemini<\/td>\n7,000<\/td>\n<\/tr>\n
gnaekhndaddbimfllbgmecjijbbfpabc<\/td>\nAsk Gemini<\/td>\n1,000<\/td>\n<\/tr>\n
hgnjolbjpjmhepcbjgeeallnamkjnfgi<\/td>\nAI Letter Generator<\/td>\n129<\/td>\n<\/tr>\n
lodlcpnbppgipaimgbjgniokjcnpiiad<\/td>\nAI Message Generator<\/td>\n24<\/td>\n<\/tr>\n
cmpmhhjahlioglkleiofbjodhhiejhei<\/td>\nAI Translator<\/td>\n194<\/td>\n<\/tr>\n
bilfflcophfehljhpnklmcelkoiffapb<\/td>\nAI For Translation<\/td>\n91<\/td>\n<\/tr>\n
cicjlpmjmimeoempffghfglndokjihhn<\/td>\nAI Cover Letter Generator<\/td>\n27<\/td>\n<\/tr>\n
ckneindgfbjnbbiggcmnjeofelhflhaj<\/td>\nAI Image Generator Chat GPT<\/td>\n249<\/td>\n<\/tr>\n
dbclhjpifdfkofnmjfpheiondafpkoed<\/td>\nAi Wallpaper Generator<\/td>\n289<\/td>\n<\/tr>\n
ecikmpoikkcelnakpgaeplcjoickgacj<\/td>\nAi Picture Generator<\/td>\n813<\/td>\n<\/tr>\n
kepibgehhljlecgaeihhnmibnmikbnga<\/td>\nDeepSeek Download<\/td>\n275<\/td>\n<\/tr>\n
ckicoadchmmndbakbokhapncehanaeni<\/td>\nAI Email Writer<\/td>\n64<\/td>\n<\/tr>\n
fnjinbdmidgjkpmlihcginjipjaoapol<\/td>\nEmail Generator AI<\/td>\n881<\/td>\n<\/tr>\n
gohgeedemmaohocbaccllpkabadoogpl<\/td>\nDeepSeek Chat<\/td>\n1,000<\/td>\n<\/tr>\n
flnecpdpbhdblkpnegekobahlijbmfok<\/td>\nChatGPT Picture Generator<\/td>\n251<\/td>\n<\/tr>\n
acaeafediijmccnjlokgcdiojiljfpbe<\/td>\nChatGPT Translate<\/td>\n30,000<\/td>\n<\/tr>\n
kblengdlefjpjkekanpoidgoghdngdgl<\/td>\nAI GPT<\/td>\n20,000<\/td>\n<\/tr>\n
idhknpoceajhnjokpnbicildeoligdgh<\/td>\nChatGPT Translation<\/td>\n1,000<\/td>\n<\/tr>\n
fpmkabpaklbhbhegegapfkenkmpipick<\/td>\nChat GPT for Gmail<\/td>\n1,000<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/figure>\n

How the Extensions Work<\/strong><\/h1>\n

When one extension is removed, attackers quickly upload a clone with a new name and ID, a tactic known as \u201cextension spraying.\u201d<\/p>\n

Instead of running AI features locally, the extensions load a full-screen iframe from attacker-controlled domains such as tapnetic[.]pro.<\/p>\n

\"IFrame
IFrame Injection (Source: Layerx Security)<\/em><\/figcaption><\/figure>\n

This allows operators to change functionality remotely without updating the extension in the Chrome Web Store.<\/a><\/p>\n

Once installed, the extensions can: Extract readable content from active tabs, including authenticated pages.<\/p>\n

Capture voice input using the Web Speech API. Track installs and uninstalls using hidden telemetry. A Gmail-focused cluster of 15 extensions injects scripts directly into mail. google[.]com.<\/p>\n

These scripts monitor page changes and repeatedly collect visible email content, including threads, drafts, and replies, and send it to attacker-controlled servers.<\/p>\n

\"Tapnetic.pro
Tapnetic.pro subdomains \u2013 VirusTotal.com (Source: LayerxSecurity)<\/em><\/figcaption><\/figure>\n

All identified extensions communicate with domains under tapnetic[.]pro and onlineapp[.]pro.<\/p>\n

Each extension uses themed subdomains (such as chatgpt. tapnetic[.]pro or gemini. tapnetic[.]pro), but connects to the same backend system.<\/p>\n

When one high-install extension was removed in February 2025, an identical replacement appeared within weeks using the same malicious architecture.<\/p>\n

According to LayerxSecurity researcher<\/a>, the campaign also relies on multiple Gmail accounts to manage and publish extensions.<\/p>\n

Tactics and Defender Guidance<\/strong><\/h1>\n
\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Tactic<\/th>\nTechnique Code<\/th>\nTechnique Name<\/th>\n<\/tr>\n<\/thead>\n
Resource Development<\/td>\nLX2.003 (T1583)<\/td>\nAcquire Infrastructure<\/td>\n<\/tr>\n
Initial Access<\/td>\nLX3.004 (T1189)<\/td>\nDrive-by Compromise<\/td>\n<\/tr>\n
Initial Access<\/td>\nLX3.003 (T1199)<\/td>\nTrusted Relationship<\/td>\n<\/tr>\n
Execution<\/td>\nLX4.003<\/td>\nScript Execution<\/td>\n<\/tr>\n
Defense Evasion<\/td>\nLX7.011 (T1036)<\/td>\nMasquerading<\/td>\n<\/tr>\n
Credential Access<\/td>\nLX8.007 (T1557)<\/td>\nAdversary-in-the-Middle<\/td>\n<\/tr>\n
Collection<\/td>\nLX10.012<\/td>\nWeb Communication Data Collection<\/td>\n<\/tr>\n
Collection<\/td>\nLX10.005<\/td>\nCollect User\u2019s Information<\/td>\n<\/tr>\n
Command and Control<\/td>\nLX11.004<\/td>\nEstablish Network Connection<\/td>\n<\/tr>\n
Command and Control<\/td>\nLX11.005<\/td>\nWeb Service-Based C2<\/td>\n<\/tr>\n
Exfiltration<\/td>\nLX12.001<\/td>\nData Exfiltration<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/figure>\n

The operation uses brand impersonation, malicious browser extensions, and web-based command-and-control infrastructure.<\/a><\/p>\n

By relying on remote iframes, attackers bypass install-time reviews and maintain full control after deployment.<\/p>\n

Defenders should: Audit AI-branded Chrome extensions in their environments. Monitor for suspicious iframe injection and unusual Gmail DOM access.<\/p>\n

Watch for outbound traffic to tapnetic[.]pro and related domains. Prioritize runtime monitoring over static extension reviews.<\/p>\n

Organizations should treat AI-themed browser<\/a> extensions with caution and enforce strict extension management policies.<\/p>\n

Follow us on Google News<\/a>, LinkedIn<\/a>, and X<\/a> for daily cybersecurity updates. Contact us<\/a> to feature your stories.<\/strong><\/p>\n

The post Malicious Chrome AI Extensions Attacking 260,000 Users via Injected IFrames<\/a> appeared first on Cyber Security News<\/a>.<\/p>\n<\/div>\n

\t

\n
<\/BR>
\n Abinaya
\n \t

\n
<\/BR>
\nGo to cyber-security-news<\/a>
\n \t

\n
<\/BR><\/p>\n","protected":false},"excerpt":{"rendered":"

Malicious Chrome AI Extensions Attacking 260,000 Users via Injected IFrames A coordinated campaign is using malicious Chrome extensions that impersonate popular AI tools like ChatGPT, Claude, Gemini, and Grok. These fake \u201cAI assistants\u201d spy on users through injected, remote-controlled iframes, turning helpful browser add-ons into surveillance tools. More than 260,000 users have installed these extensions. […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[167,768,129,63],"tags":[130],"class_list":["post-10661","post","type-post","status-publish","format-standard","hentry","category-ai","category-chrome","category-cyber-security","category-cyber-security-news","tag-cyber-security-news"],"_links":{"self":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/10661"}],"collection":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/comments?post=10661"}],"version-history":[{"count":0,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/10661\/revisions"}],"wp:attachment":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/media?parent=10661"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/categories?post=10661"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/tags?post=10661"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}