Google Chrome updates extension privacy amid malware warnings

Google is testing a significant update to Google Chrome designed to enhance user privacy and control over browser extensions. Currently, extensions often receive broad permissions to interact with all compatible websites upon installation. The proposed change would introduce a selection window during installation, allowing users to choose between granting access ‘When the extension is clicked’ or ‘Always on all sites.’ This default-to-restricted approach aims to prevent extensions from accessing data without explicit user interaction.

In a separate security concern, researchers have identified a malicious extension called ‘Poper Blocker’ available on the Chrome Web Store. Security firm Bay Area Labs Inc. reported that the extension uses dark patterns to trick users into consenting to data sharing. Once active, the extension can harvest sensitive information, including browsing history, social media data, and even prompts and responses from AI chatbots like ChatGPT, Claude, and Gemini. The extension reportedly bypasses simple analysis by downloading malicious commands from a remote server after installation. Investigations into the developer, Big Star Lab, have revealed suspicious characteristics, including the use of stock photos for employee profiles and a lack of transparent corporate ownership.