AiFrame fake AI Chrome extensions expose browsing and Gmail content; linked extensions emerge after removal
AiFrame extensions exposed Chrome page content and Gmail text. Google removed the original set, but linked extensions appeared in April. Check extension IDs against the researchers’ lists, remove matches and reset passwords if affected.
In Chrome, open Extensions → Manage extensions, compare extension IDs with the researchers’ lists and remove any matches; names can change. If you had one installed, reset passwords for accounts used in that browser. Ask your IT team to review any work email exposure.
- AI Assistantno fixed version yet
- Llamano fixed version yet
- Gemini AI Sidebarno fixed version yet
- AI Sidebarno fixed version yet
- ChatGPT Sidebarno fixed version yet
- AI Sidebarno fixed version yet
- Grokno fixed version yet
- Asking Chat Gptno fixed version yet
- ChatGBTno fixed version yet
- Chat Bot GPTno fixed version yet
- Grok Chatbotno fixed version yet
- Chat With Geminino fixed version yet
- XAIno fixed version yet
- Google Gemini / AI Agentno fixed version yet
- Ask Geminino fixed version yet
- AI Letter Generatorno fixed version yet
- AI Message Generatorno fixed version yet
- AI Translatorno fixed version yet
- AI For Translationno fixed version yet
- AI Cover Letter Generatorno fixed version yet
- AI Image Generator Chat GPTno fixed version yet
- Ai Wallpaper Generatorno fixed version yet
- Ai Picture Generatorno fixed version yet
- DeepSeek Downloadno fixed version yet
- AI Email Writerno fixed version yet
- Email Generator AIno fixed version yet
- DeepSeek Chatno fixed version yet
- ChatGPT Picture Generatorno fixed version yet
- ChatGPT Translateno fixed version yet
- AI GPTno fixed version yet
- ChatGPT Translationno fixed version yet
- Chat GPT for Gmailno fixed version yet
- AI Chat to PDFno fixed version yet
- Convert HEIC to JPGno fixed version yet
- 2FAno fixed version yet
What’s happening
LayerX disclosed AiFrame on 12 February 2026, describing 30 fake AI Chrome extensions reaching over 260,000 users. Its indicator table lists 32 IDs; BleepingComputer reported over 300,000 users. The extensions could pass browser page content to remotely controlled interfaces. Fifteen also read visible Gmail messages and, depending on page state, drafts; invoking email assistance transmitted extracted content to the operators’ servers. Google confirmed removal of the original extensions in a report updated on 17 February. On 24 April, DomainTools linked another group to AiFrame, including AI Chat to PDF, Convert HEIC to JPG and a fake authenticator. Two analysed extensions had active malicious functionality; the authenticator’s suspicious capabilities were dormant. SC Media found seven linked extensions still listed, totalling 134,000 installs. As at 3 November, no later public confirmation of complete removal or the extent of data taken was found. Removal, rather than a software update, is the remedy.
- What
- Poisoned software
- Affects
- AiFrame extensions for desktop Google Chrome, including fake AI assistants and later linked utilities
- Affected
- Original AiFrame Chrome extensions: LayerX describes 30 extensions and lists 32 extension IDs; affected version ranges were not published.
AI Chat to PDF (nlfkaldinolmacagmiddfpnfaeclfibn): malicious functionality documented by DomainTools; version range not published.
Convert HEIC to JPG (nmijijenojhiaohkfedfgchgbmjnfcpp): malicious functionality documented by DomainTools; version range not published.
2FA / 2FA Authenticator (ebhcbenbgjmaebpgbldimndmfomjmphd): linked to the campaign with suspicious permissions and dormant capabilities; active data theft by this extension was not established. - Fixed in
- Nothing to patch
- Since
- 12 Feb 2026
- Closed
- 24 Apr 2026
Timeline
- Update
SC Media found all seven extensions in the linked group still available in the Chrome Web Store, with 134,000 installs altogether.
- Wider attacks
DomainTools linked another extension group to AiFrame. AI Chat to PDF and Convert HEIC to JPG contained active malicious functionality; a fake authenticator had suspicious permissions and dormant capabilities.
- Update
The Register updated its report with Google's confirmation that all the originally identified extensions had been removed from the Chrome Web Store.
- Update
BleepingComputer reported over 300,000 users and identified seven extensions still available, including AI Sidebar with 70,000 users and AI Assistant with 60,000.
- Made publicNothing to patch
LayerX disclosed AiFrame, describing 30 coordinated extensions reaching over 260,000 users. Fifteen included Gmail-reading functionality.
- Update
According to LayerX, an identical extension returned as AI Sidebar under a different extension ID.
- Update
LayerX later documented the removal of Gemini AI Sidebar from the Chrome Web Store, showing that the operation predated its public disclosure.
Sources
- AiFrame: Fake AI Assistant Extensions Targeting 260,000 Chrome Users via injected iframesLayerX (now hosted by Akamai) · 12 Feb 2026
- The AI Frame Campaign ContinuesDomainTools · 24 Apr 2026
- Fake AI Chrome extensions with 300K users steal credentials, emailsBleepingComputer · 12 Feb 2026
- 30+ Chrome extensions disguised as AI chatbots steal users' API keys, emails, other sensitive dataThe Register · 17 Feb 2026
- AiFrame browser attacks continue with fake authenticator, converter extensionsSC Media · 24 Apr 2026
- Install and manage extensionsGoogle