A popular Chrome extension marketed as an ad blocker was found collecting users’ full browsing histories and AI chatbot conversations. Researchers say Poper Blocker, which had more than 2 million users, can pull chats from ChatGPT, Claude, Gemini, and Google AI Mode after users accept data sharing, and it uses server-delivered collection logic through a built-in interpreter so the operator can change what is gathered and where it is sent without a store update.
Why it matters: People may paste highly sensitive work, personal, or customer information into AI chat tools, so this kind of hidden collection creates immediate privacy and data-leak risk. Users should remove the extension if installed, review browser extensions for broad permissions, and assume exposed AI chats may no longer be private.
SecurityWeek News
2026.10.02
100% relevant
This article establishes the core event: a named browser extension with millions of users was found siphoning browser and AI-chat data via remotely changeable logic.
← Back to all stories