{"id":"aiframe-fake-ai-chrome-extensions-feb-2026","category":"supply-chain","status":"closed","title":"AiFrame fake AI Chrome extensions expose browsing and Gmail content; linked extensions emerge after removal","tldr":"AiFrame extensions exposed Chrome page content and Gmail text. Google removed the original set, but linked extensions appeared in April. Check extension IDs against the researchers’ lists, remove matches and reset passwords if affected.","summary":"LayerX disclosed AiFrame on 12 February 2026, describing 30 fake AI Chrome extensions reaching over 260,000 users. Its indicator table lists 32 IDs; BleepingComputer reported over 300,000 users. The extensions could pass browser page content to remotely controlled interfaces. Fifteen also read visible Gmail messages and, depending on page state, drafts; invoking email assistance transmitted extracted content to the operators’ servers. Google confirmed removal of the original extensions in a report updated on 17 February. On 24 April, DomainTools linked another group to AiFrame, including AI Chat to PDF, Convert HEIC to JPG and a fake authenticator. Two analysed extensions had active malicious functionality; the authenticator’s suspicious capabilities were dormant. SC Media found seven linked extensions still listed, totalling 134,000 installs. As at 3 November, no later public confirmation of complete removal or the extent of data taken was found. Removal, rather than a software update, is the remedy.","action":"In Chrome, open Extensions → Manage extensions, compare extension IDs with the researchers’ lists and remove any matches; names can change. If you had one installed, reset passwords for accounts used in that browser. Ask your IT team to review any work email exposure.","product":"AiFrame extensions for desktop Google Chrome, including fake AI assistants and later linked utilities","audience":"both","severity":"high","patch":"na","exploited":true,"cves":[],"tags":["aiframe","chrome","browser-extension","supply-chain","gmail","data-theft"],"affected":["Original AiFrame Chrome extensions: LayerX describes 30 extensions and lists 32 extension IDs; affected version ranges were not published.","AI Chat to PDF (nlfkaldinolmacagmiddfpnfaeclfibn): malicious functionality documented by DomainTools; version range not published.","Convert HEIC to JPG (nmijijenojhiaohkfedfgchgbmjnfcpp): malicious functionality documented by DomainTools; version range not published.","2FA / 2FA Authenticator (ebhcbenbgjmaebpgbldimndmfomjmphd): linked to the campaign with suspicious permissions and dormant capabilities; active data theft by this extension was not established."],"fixed":[],"matches":[{"platform":"chrome","app":"AI Assistant","bundle":"nlhpidbjmmffhoogcennoiopekbiglbp","fixed":""},{"platform":"chrome","app":"Llama","bundle":"gcfianbpjcfkafpiadmheejkokcmdkjl","fixed":""},{"platform":"chrome","app":"Gemini AI Sidebar","bundle":"fppbiomdkfbhgjjdmojlogeceejinadg","fixed":""},{"platform":"chrome","app":"AI Sidebar","bundle":"djhjckkfgancelbmgcamjimgphaphjdl","fixed":""},{"platform":"chrome","app":"ChatGPT Sidebar","bundle":"llojfncgbabajmdglnkbhmiebiinohek","fixed":""},{"platform":"chrome","app":"AI Sidebar","bundle":"gghdfkafnhfpaooiolhncejnlgglhkhe","fixed":""},{"platform":"chrome","app":"Grok","bundle":"cgmmcoandmabammnhfnjcakdeejbfimn","fixed":""},{"platform":"chrome","app":"Asking Chat Gpt","bundle":"phiphcloddhmndjbdedgfbglhpkjcffh","fixed":""},{"platform":"chrome","app":"ChatGBT","bundle":"pgfibniplgcnccdnkhblpmmlfodijppg","fixed":""},{"platform":"chrome","app":"Chat Bot GPT","bundle":"nkgbfengofophpmonladgaldioelckbe","fixed":""},{"platform":"chrome","app":"Grok Chatbot","bundle":"gcdfailafdfjbailcdcbjmeginhncjkb","fixed":""},{"platform":"chrome","app":"Chat With Gemini","bundle":"ebmmjmakencgmgoijdfnbailknaaiffh","fixed":""},{"platform":"chrome","app":"XAI","bundle":"baonbjckakcpgliaafcodddkoednpjgf","fixed":""},{"platform":"chrome","app":"Google Gemini / AI Agent","bundle":"fdlagfnfaheppaigholhoojabfaapnhb","fixed":""},{"platform":"chrome","app":"Ask Gemini","bundle":"gnaekhndaddbimfllbgmecjijbbfpabc","fixed":""},{"platform":"chrome","app":"AI Letter Generator","bundle":"hgnjolbjpjmhepcbjgeeallnamkjnfgi","fixed":""},{"platform":"chrome","app":"AI Message Generator","bundle":"lodlcpnbppgipaimgbjgniokjcnpiiad","fixed":""},{"platform":"chrome","app":"AI Translator","bundle":"cmpmhhjahlioglkleiofbjodhhiejhei","fixed":""},{"platform":"chrome","app":"AI For Translation","bundle":"bilfflcophfehljhpnklmcelkoiffapb","fixed":""},{"platform":"chrome","app":"AI Cover Letter Generator","bundle":"cicjlpmjmimeoempffghfglndokjihhn","fixed":""},{"platform":"chrome","app":"AI Image Generator Chat GPT","bundle":"ckneindgfbjnbbiggcmnjeofelhflhaj","fixed":""},{"platform":"chrome","app":"Ai Wallpaper Generator","bundle":"dbclhjpifdfkofnmjfpheiondafpkoed","fixed":""},{"platform":"chrome","app":"Ai Picture Generator","bundle":"ecikmpoikkcelnakpgaeplcjoickgacj","fixed":""},{"platform":"chrome","app":"DeepSeek Download","bundle":"kepibgehhljlecgaeihhnmibnmikbnga","fixed":""},{"platform":"chrome","app":"AI Email Writer","bundle":"ckicoadchmmndbakbokhapncehanaeni","fixed":""},{"platform":"chrome","app":"Email Generator AI","bundle":"fnjinbdmidgjkpmlihcginjipjaoapol","fixed":""},{"platform":"chrome","app":"DeepSeek Chat","bundle":"gohgeedemmaohocbaccllpkabadoogpl","fixed":""},{"platform":"chrome","app":"ChatGPT Picture Generator","bundle":"flnecpdpbhdblkpnegekobahlijbmfok","fixed":""},{"platform":"chrome","app":"ChatGPT Translate","bundle":"acaeafediijmccnjlokgcdiojiljfpbe","fixed":""},{"platform":"chrome","app":"AI GPT","bundle":"kblengdlefjpjkekanpoidgoghdngdgl","fixed":""},{"platform":"chrome","app":"ChatGPT Translation","bundle":"idhknpoceajhnjokpnbicildeoligdgh","fixed":""},{"platform":"chrome","app":"Chat GPT for Gmail","bundle":"fpmkabpaklbhbhegegapfkenkmpipick","fixed":""},{"platform":"chrome","app":"AI Chat to PDF","bundle":"nlfkaldinolmacagmiddfpnfaeclfibn","fixed":""},{"platform":"chrome","app":"Convert HEIC to JPG","bundle":"nmijijenojhiaohkfedfgchgbmjnfcpp","fixed":""},{"platform":"chrome","app":"2FA","bundle":"ebhcbenbgjmaebpgbldimndmfomjmphd","fixed":""}],"sources":[{"kind":"research","title":"AiFrame: Fake AI Assistant Extensions Targeting 260,000 Chrome Users via injected iframes","url":"https://www.akamai.com/blog/security-research/aiframe-fake-ai-assistant-extensions-targeting-260000-chrome-users-via-injected-iframes","by":"LayerX (now hosted by Akamai)","date":"2026-02-12"},{"kind":"research","title":"The AI Frame Campaign Continues","url":"https://dti.domaintools.com/securitysnacks/the-ai-frame-campaign-continues","by":"DomainTools","date":"2026-04-24"},{"kind":"news","title":"Fake AI Chrome extensions with 300K users steal credentials, emails","url":"https://www.bleepingcomputer.com/news/security/fake-ai-chrome-extensions-with-300k-users-steal-credentials-emails/","by":"BleepingComputer","date":"2026-02-12"},{"kind":"news","title":"30+ Chrome extensions disguised as AI chatbots steal users' API keys, emails, other sensitive data","url":"https://www.theregister.com/security/2026/02/12/30-chrome-extensions-disguised-as-ai-chatbots-steal-secrets/5016620","by":"The Register","date":"2026-02-17"},{"kind":"news","title":"AiFrame browser attacks continue with fake authenticator, converter extensions","url":"https://www.scworld.com/news/aiframe-browser-attacks-continue-with-fake-authenticator-converter-extensions","by":"SC Media","date":"2026-04-24"},{"kind":"advisory","title":"Install and manage extensions","url":"https://support.google.com/chrome_webstore/answer/2664769?hl=en","by":"Google","date":""}],"started":"2026-02-12","closed":"2026-04-24","created":"2026-11-03T21:31:22.987Z","updated":"2026-11-03T21:31:22.987Z","cve_notes":[],"timeline":[{"at":"2026-04-24","added":"2026-11-03T21:25:43.261Z","kind":"other","text":"SC Media found all seven extensions in the linked group still available in the Chrome Web Store, with 134,000 installs altogether.","url":"https://www.scworld.com/news/aiframe-browser-attacks-continue-with-fake-authenticator-converter-extensions","by":"SC Media","patch":null},{"at":"2026-04-24","added":"2026-11-03T21:25:43.261Z","kind":"wider-attacks","text":"DomainTools linked another extension group to AiFrame. AI Chat to PDF and Convert HEIC to JPG contained active malicious functionality; a fake authenticator had suspicious permissions and dormant capabilities.","url":"https://dti.domaintools.com/securitysnacks/the-ai-frame-campaign-continues","by":"DomainTools","patch":null},{"at":"2026-02-17","added":"2026-11-03T21:25:43.261Z","kind":"other","text":"The Register updated its report with Google's confirmation that all the originally identified extensions had been removed from the Chrome Web Store.","url":"https://www.theregister.com/security/2026/02/12/30-chrome-extensions-disguised-as-ai-chatbots-steal-secrets/5016620","by":"The Register","patch":null},{"at":"2026-02-12","added":"2026-11-03T21:25:43.261Z","kind":"other","text":"BleepingComputer reported over 300,000 users and identified seven extensions still available, including AI Sidebar with 70,000 users and AI Assistant with 60,000.","url":"https://www.bleepingcomputer.com/news/security/fake-ai-chrome-extensions-with-300k-users-steal-credentials-emails/","by":"BleepingComputer","patch":null},{"at":"2026-02-12","added":"2026-11-03T21:25:43.261Z","kind":"disclosed","text":"LayerX disclosed AiFrame, describing 30 coordinated extensions reaching over 260,000 users. Fifteen included Gmail-reading functionality.","url":"https://www.akamai.com/blog/security-research/aiframe-fake-ai-assistant-extensions-targeting-260000-chrome-users-via-injected-iframes","by":"LayerX","patch":"na"},{"at":"2025-02-20","added":"2026-11-03T21:25:43.261Z","kind":"other","text":"According to LayerX, an identical extension returned as AI Sidebar under a different extension ID.","url":"https://www.akamai.com/blog/security-research/aiframe-fake-ai-assistant-extensions-targeting-260000-chrome-users-via-injected-iframes","by":"LayerX","patch":null},{"at":"2025-02-06","added":"2026-11-03T21:25:43.261Z","kind":"other","text":"LayerX later documented the removal of Gemini AI Sidebar from the Chrome Web Store, showing that the operation predated its public disclosure.","url":"https://www.akamai.com/blog/security-research/aiframe-fake-ai-assistant-extensions-targeting-260000-chrome-users-via-injected-iframes","by":"LayerX","patch":null}],"url":"https://hard.fyi/live/aiframe-fake-ai-chrome-extensions-feb-2026/","json":"https://hard.fyi/api/live?id=aiframe-fake-ai-chrome-extensions-feb-2026"}