Beware: Fake Software Spies on Your Private AI Chats

We all love a good ad-blocker to make browsing the internet smoother, but new reports suggest some aren't so innocent. Security experts have uncovered a sneaky trick where two popular browser extensions, pretending to block ads, were actually doing something far more concerning: reading private conversations people had with AI tools like ChatGPT, Google Gemini, and Claude.

Nearly 90,000 users were reportedly affected by these rogue programs, which silently collected their personal AI chats. Think about all the things you might ask an AI — from business plans and creative ideas to personal health questions or even just your daily to-do list. All that information was potentially exposed to unknown parties. This highlights a growing concern in the digital world: the hidden dangers in seemingly useful software.

The experts who found this issue have called the operation 'PromptSnatcher'. It's a stark reminder that if something sounds too good to be true, it often is. When you download a new browser extension, it often asks for certain 'permissions' – like the ability to 'read and change all your data on websites you visit'. Many of us click 'accept' without truly understanding the power we're handing over. In this case, those permissions were clearly abused.

For Aussie small business owners, parents, and anyone using AI, this is a wake-up call to be more vigilant. Our digital privacy is becoming increasingly valuable, and criminals are finding clever ways to get at it. Always double-check where you're downloading software from, stick to well-known and reputable sources, and review the permissions any new application requests.

This incident underscores the importance of digital hygiene. Just like you wouldn't leave your physical documents lying around for anyone to see, the same care needs to be taken with your digital interactions, especially with AI, which can hold a trove of personal or business-sensitive information. Keeping your online activities secure is a shared responsibility, and knowing these risks is the first step.