Security Warning for Chrome Extensions: Millions of Users at Risk!

Security Warning for Chrome Extensions: Millions of Users at Risk!

Internet security research has revealed a significant risk affecting users of the Google Chrome browser. Analyses found that hundreds of malicious extensions have been downloaded by millions of people and are capable of collecting user data without permission.

According to the research, more than 300 extensions reached a total of approximately 37 million installations. This indicates that the issue is not an isolated case but a large-scale security problem.

Published in the Official Store

A significant portion of the detected extensions were distributed through the official extension platform, the Chrome Web Store. Experts emphasize that users often accept store approval as a sign of safety, but this is not always sufficient.

At first glance, the extensions appeared to offer normal features such as:

• text writing and summarization tools
• email assistants
• social media editing tools
• free VPN and security utilities

However, it was discovered that they could send browsing data to remote servers in the background.

Sensitive Data Among Collected Information

Technical examinations revealed that some extensions can read the pages users visit and the content in open tabs. 

The following data may therefore be at risk:

• session information
• browsing history
• page content
• in some cases, email text

According to experts, because browser extensions have broad permissions, a single extension can observe a large portion of a user’s online activity.

AI Extensions Stand Out

Another notable finding in the report is that a significant portion of the malware imitates artificial intelligence tools. These productivity-focused tools gain user trust more easily.

Such extensions often appear functional while secretly transferring data in the background.

Platform Intervened — But Risk May Continue

After the discoveries, Google removed many harmful extensions from the store and disabled some of them.

However, experts warn users:

Removal from the store does not mean the extension is automatically deleted from your device.

Users are therefore advised to manually check installed extensions.

Why Is This Important?

Because browser extensions can request permission to access all visited sites, they have broader data access than traditional applications. Security researchers note that in recent years attackers increasingly obtain access through users rather than directly infiltrating systems.

How Can Users Make Chrome Safer?

Experts say a few simple habits can significantly reduce risk.

Review Extensions

Type chrome://extensions into the address bar and check installed add-ons.

Remove unused or unknown extensions.

Check Permissions

Carefully inspect extensions requesting “read and change all your data on websites.”

If permissions don’t match the function, remove the extension.

Enable Enhanced Safe Browsing

Settings → Privacy & Security → Security → Enhanced protection
This mode can detect harmful sites and downloads earlier.

Keep the Browser Updated

Google regularly releases security updates. Outdated versions may contain known vulnerabilities.

Check Synchronization

If a suspicious extension is detected, temporarily disable account sync; otherwise it may spread to other devices.

Use Separate Profiles

Use different browser profiles for daily browsing and banking to limit data access.

Be Careful with Free AI Extensions

If a service can be used directly through its official website, installing an additional extension is usually an unnecessary risk.

***As a result, the overall picture shows that browser extensions have become an important part of modern cyberattack methods. Using antivirus software alone is no longer enough; browsing habits must also be reviewed regularly. In short, a small extension can turn into a major data risk.