Threat Intelligence

Popular Chrome 'Ad Blocker' Extension Caught Secretly Spying on Users

Dark Reading · 29 Sept 2026

Key Takeaway Regularly audit browser extensions installed across your business devices and remove any that aren't essential, even if they came from an official store.

Security researchers have identified a Chrome extension called Poper Blocker, downloaded millions of times from the official Chrome Web Store, as spyware. Despite being marketed as an ad-blocking tool, the extension reportedly harvests large amounts of sensitive user information and sends it to external parties without proper disclosure.

What makes this case particularly concerning is that the extension remains available through Google's official store, giving it an air of legitimacy that many users rely on when deciding what to install. Researchers have raised warnings about the extension's behaviour, yet its continued presence on the platform means businesses and staff may unknowingly still be installing it, trusting the Chrome Web Store's vetting process to catch malicious software.

This incident highlights a broader problem for small businesses: browser extensions often request broad permissions to read and change data on websites you visit, which can be exploited to quietly collect sensitive information such as login details, browsing habits, or business data. Even extensions from official app stores are not guaranteed to be safe.

browser security spyware Chrome extensions data exfiltration SMB security

Summarised by CISO AI from Dark Reading. We link back to every original so you can read it yourself.