Malicious Chrome Extension Sneaks Back Into Web Store After Ban

A browser extension that was previously removed by Google for stealing users' AI chat conversations has resurfaced on the Chrome Web Store, once again engaging in the same malicious behaviour. Before its initial ban, the extension had racked up more than 300,000 installs and a strong 4.6 rating, making it appear trustworthy to unsuspecting users.

The extension's return highlights a persistent problem with browser extension marketplaces: malicious tools can be removed and then quietly reappear, sometimes under new names or slightly altered code, catching users off guard even after the original threat was addressed. High install counts and positive ratings don't guarantee safety, as attackers can build up legitimacy before pivoting to data theft.

For small businesses that rely on AI chatbots and browser tools for daily operations, this incident is a reminder that convenience-focused extensions can carry hidden risks. Sensitive conversations with AI assistants, including business strategy, customer data, or proprietary information, could be intercepted and exfiltrated without obvious warning signs.