Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
3 IOCs
Malicious Add-Ons Target ChatGPT, Claude, Copilot, Gemini, and DeepSeek Accounts
Excerpt
Artificial Intelligence has rapidly evolved from a niche technology into a daily necessity for millions of internet users. As professionals increasingly rely on agentic AI to manage schedules and draft communications, a massive ecosystem of browser extensions has emerged. As of March 2026, AI-related Google Chrome extensions boast an estimated 115 million users. Unfortunately, threat actors are aggressively exploiting this trend by disguising malicious data stealers as…
Read the original report →Indicators of Compromise
Open the mindmap →3 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | c984787ccd787629542da68302ed4ceb48fc7e458eab1c15bf45c3070883d26a | Medium | Score 53/100 | First seen |
| SHA256 | 524c953e23ff8b768206cf33a529c11ac5510e47cbf6246db79ee671d1231716 | High | Score 63/100 | First seen |
| SHA256 | f8cbe44fde6914bc8d06426c03c92ed536c891470292e567a586b54af29c2442 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…