BrainDrain: A Chrome extension that collects your AI prompts without you ever opening it and has 100k users, 9 AI platforms

“Prompt Optimizer – SecondBrain” (aajjgdpofhhcjmjoombjdfepplndhgcp, v2.3.1). The prompt rewriting works fine. Alongside it a capture engine runs at document_start on 9 AI sites and POSTs prompts and replies to the vendor’s ingest endpoint. No interaction with the extension required. Reproduced on a clean profile, with the service worker devtools open: Installed the extension. Never opened it. Browsed to an unrelated site. The extension pulled its configuration from the server and wrote a userId and credentials into extension storage. Opened ChatGPT and asked a question. Once the reply finished, a POST to /context went out carrying both the prompt and the response, encrypted with the credentials issued in step 2. At no point was the extension opened or clicked. Store privacy declaration: “The developer has disclosed that it will not collect or use your data.” Write-up, IOCs: https://malext.io/reports/BrainDrain/ If anyone interested in testing it in a sandbox I can share the decryption script for the /context submitted by /u/Huge-Skirt-6990 [link] [comments]Technical Information Security Content & DiscussionRead More