Pakistan alerts users to AI-powered browser extensions exploited for data theft
Pakistan's National Telecommunication and Information Technology Security Board issued a cybersecurity advisory warning that hackers have exploited browser extensions, including those for AI tools and VPNs, to steal users' personal information. The advisory identified 16 applications at risk and recommended users exercise caution with browser extensions and maintain updated security software.
What happened
Pakistan's National Telecommunication and Information Technology Security Board issued a cybersecurity advisory warning users of VPNs and AI tools that hackers had exploited browser extensions to steal personal information.
The advisory identified 16 applications including ChatGPT 4, Gemini for Chrome, AI Assistant, Bard AI Chat Extension, VPN STD, and video downloader tools as suspected of being targeted by attackers inserting code into browser extensions to access users' personally identifiable information (PII).
Reported impact
The advisory warned of growing risks to users of VPNs and AI-powered tools, with hackers reportedly inserting code into browser extensions to potentially access personal identifying information, and noted concerns of information theft through Facebook and banking websites.
Governance controls
The advisory recommended installing trusted extensions, regularly updating them, using licensed antivirus software, and exercising caution with free extensions.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.