Chrome extension disguised as AI assistant expose 10K+ users OpenAI API keys
A Chrome browser extension posing as an artificial intelligence assistant is siphoning OpenAI credentials from more than 10,000 users and sending them to third-party servers. Cybersecurity platform Obsidian has identified a browser extension called H-Chat Assistant that reportedly masquerades as a tool that connects people to OpenAI’s chatbot services. The researchers claim it secretly harvested […]
- Read at Cryptopolitan
- Thu, 29 Jan 2026 13:00:59 +0000