Facebook accounts hijacked by new malicious ChatGPT Chrome extension

Just another friendly cautionary information post for everyone. If you are considering using ChatGPT and the extension from the Google Play Store my best advice is don't use it. Please review the article at Bleeping Computer regarding best practices. From the article:

The extension is a copy of the legitimate popular add-on for Chrome named "ChatGPT for Google" that offers ChatGPT integration on search results. However, this malicious version includes additional code that attempts to steal Facebook session cookies.

The publisher of the extension uploaded it to the Chrome Web Store on February 14, 2023, but only started promoting it using Google Search advertisements on March 14, 2023. Since then, it has had an average of a thousand installations per day.

https://www.bleepingcomputer.com/news/security/facebook-accounts-hijacked-by-new-malicious-chatgpt-chrome-extension/

SA