Cyber threat: Popular browser extensions hacked, thousands of users at risk

ISLAMABAD: The National Telecommunication and Information Technology Security Board (NTISB) has cautioned internet users about a spate of cyberattacks targeting various browser extensions.

The advisory claims that at least 16 popular browser extensions have fallen victim to the malicious hands of hackers, thereby jeopardizing users’ data and cybersecurity.

Hackers have targeted high-profile AI tools such as ChatGPT, Gemini, ChatGPT4, Bard AI, and VPN extensions like VPN City and Internext VPN. Other affected extensions include Flex Video Recorder, bill marking, voice services, reading modes, and automation tools.

The NTISB has advised users to be cautious while installing browser extensions and recommended using only trusted and reputed extensions.

Users are also advised to check the options and ratings for the extensions before installing and, whenever possible, to refrain from using the affected extensions.

Extensions must be granted the least amount of privilege necessary to function. They should be kept up to date and removed if not provide a necessary function or if privacy risks cannot be mitigated. Use authentic and licensed antivirus software to guard against malware and other threats.

The NTISB once more warned users to be wary of free extensions, which are easily susceptible to cyber attacks. Users can take precautions to help protect themselves from the risks of hacked browser extensions and enjoy a safer online experience.

Affected Extensions

– ChatGPT
– Gemini
– ChatGPT4
– Bard AI
– VPN City
– Internext VPN
– Flex Video Recorder
– Bill marking extensions
– Voice services extensions
– Reading mode extensions
– Automation tools extensions