ChatGPT Chrome extension stealing Facebook accounts

A trojanized version of the ChatGPT extension for Chrome has been stealing Facebook accounts. The malicious extension was uploaded to the Chrome Web Store on February 14, 2023, and has since accumulated over 9,000 downloads. The extension is promoted via advertisements in Google Search results, which take users to a fake "ChatGPT for Google" landing page. Once installed, the extension steals Facebook session cookies, allowing the threat actors to log in to a Facebook account as the user and gain full access to their profiles. The malicious extension is still present in the Chrome Web Store, but Google has taken action to remove it.