In recent months, the advanced chatbot ChatGPT, developed by Open AI with support from Microsoft, has gained immense popularity. No wonder scammers took advantage of this. As it turned out, the Quick access to ChatGPT extension for the Google Chrome browser, which allows you to access an AI bot in a few clicks, actually also collected user data and accessed their Facebook accounts.*.
Image Credit: Jonathan Kemper / Unsplash
Reportedly, quick access to ChatGPT was available from March 3rd to March 9th in the Chrome add-on store. During this short time, the extension was installed daily by more than 2,000 Google browser users who wanted to experience the power of the AI bot. Although this product offered the ability to quickly access the bot, it also stole user data.
Security company Guardio discovered that Quick access to ChatGPT collects all browser cookies and steals authenticated session tokens from Google, YouTube, Facebook* and Twitter. Because of this, scammers gained access to Meta* Graph API used to develop Facebook compatible applications*. This could give them access to Facebook user accounts.* and act on their behalf. If the extension has recognized Facebook business accounts*it collected data on active promotions, account balances, minimum billing thresholds, and credit lines.
Image source: Guardio
Most likely, the data thus collected will be sold on one of the hacker forums. It is also possible for scammers to use hacked Facebook accounts.* for example to implement their own malicious campaign to distribute deceptive materials on the platform.
* It is included in the list of public associations and religious organizations for which the court made a final decision to liquidate or ban activities on the grounds provided for in Federal Law No. 114-FZ of July 25. 2002 “On Countering Extremist Activities”.
Add Comment