Most people exposed to this fake add-on likely downloaded it through a sponsored advertisement in Google searches for “Chat GPT 4,” mirroring similar attacks on Radeon and Bitwarden users earlier this year. Hackers then logged into Facebook, changed the account credentials, and converted profiles to that of a false persona named “Lily Collins.” These zombie accounts were used to spread malicious advertising and extremist propaganda. Discovered by security firm Guardio Labs and reported by BleepingComputer, the false extension leveraged the Chrome Extension API to sniff out active Facebook cookies and sent the pilfered data to the attacker’s server. Until earlier today, a malware copy of the “ChatGPT for Google” extension that stole Facebook session cookies could be found in the Chrome Web Store, allowing hackers to infiltrate accounts and lock users out. That Chrome extension you downloaded to add ChatGPT integration to Google results may not be the legitimate one-and it could cause you to lose access to your Facebook account.

One password google chrome extension