NTISB Advisory Alert: Popular Browser Extensions Hacked—User Data at Risk!

The National Telecom & Information Technology Security Board (NTISB) has recently issued a major cybersecurity warning regarding a new hacking campaign targeting popular browser extensions. Hackers are reportedly exploiting these extensions to steal personal information and credentials from users accessing platforms like Facebook, banking websites, and other apps with sensitive data.

The phishing techniques used by hackers compromise legitimate extension publishers and inject malicious code into popular browser add-ons. This allows them to steal users’ Personally Identifiable Information (PII) and access online accounts.

As per the advisory, at least 16 commonly used extensions, including AI tools, VPNs, and video downloaders, are suspected to be compromised. The affected extensions include:

AI ChatBots & Assistants

• AI Assistant – ChatGPT & Gemini for Chrome
• Bard AI Chat Extension
• GPT-4 Summary with OpenAI
• Search CoPilot AI Assistant

VPN Services

• VPNCity
• Internxt VPN

Video & Utility Extensions

• Vidniz Flex Video Recorder
• VidHelper Video Downloader
• Bookmark Favicon Changer

Other Risky Extensions

• UVoice
• Reader Mode
• Parrot Talks
• Primus
• Trackker – Online Keylogger Tool
• AI Shop Buddy
• Rewards Search Automation

How to Stay Safe?

The National Telecom & Information Technology Security Board (NTISB) has issued safety guidelines to prevent data theft. Users should take the following precautions:

• Avoid using the affected extensions until further security updates.
• Only install trusted and well-reviewed browser extensions from official sources.
• Check extension permissions before installation and limit access where possible.
• Regularly update all browser extensions to prevent security vulnerabilities.
• Remove unused extensions to reduce security risks.
• Use licensed antivirus software to detect malicious activities.
• Be cautious of free extensions that ask for excessive permissions.
• Monitor system activity for unusual data usage or performance issues.

These phishing attacks highlight a growing cybersecurity risk as even seemingly legitimate tools can be weaponized by hackers. Users must be vigilant when installing browser extensions and ensure their digital security is a priority. Regular monitoring and strict permission settings can minimize risks. The safest approach is to refrain from installing any suspicious browser extensions to avoid falling victim to this new cyber threat.

Also read:

Why Hackers Prefer iPhones Over Android Devices