Google has removed a ChatGPT extension from the Chrome Web Store that was stealing Facebook cookies - but not until about 9,000 people had installed the malicious bot.
The compromising extension is called Chat GPT (notice the odd space in the name of the extension), which is nearly identical in name and code to the actual extension, ‘ChatGPT for Google’. The Register noted that the fake extension is even based on the same open-source project used by the original ChatGPT for Google tool. This means the scammers behind the bad bot just had to drop a few new lines of cookie-stealing code to get the extension where they wanted it.
