One Malicious Extension Hijacked AI Assistants in Chrome, Edge, and More

Michael Miller · 2026-09-19

Imagine this: you're using your favorite AI assistant in Chrome to summarize a document, and without any warning, it starts leaking your data to an attacker. That's exactly what happened with BragJack, a proof-of-concept attack that took over AI assistants in Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in Chrome using just one malicious extension. ### How BragJack Pulled It Off The mastermind behind this is Gal Weizman from Forever Security. He discovered a technique called **Prompt Forcing** that manipulates AI agents into executing malicious actions. It's like tricking a helpful assistant into doing something harmful without them realizing it. Here's the kicker: this attack wasn't just a theoretical exercise. It earned Weizman over $20,000 in bug bounties and two CVEs (Common Vulnerabilities and Exposures). That's serious recognition from the security community. ### Why This Matters for Antidetect Browser Users If you're using antidetect browsers to manage multiple profiles, this should raise a red flag. Many antidetect browsers rely on extensions and AI integrations to streamline workflows. A single compromised extension could potentially expose all your profiles. > "The line between helpful automation and security risk is thinner than most people think," Weizman noted in his disclosure. ### How to Protect Yourself - **Audit your extensions regularly.** Remove any you don't recognize or no longer use. - **Stick to official sources.** Only install extensions from verified developers. - **Use separate browser profiles.** Keep sensitive activities isolated from general browsing. - **Stay informed.** Follow security researchers and update your browsers promptly. ### The Bigger Picture AI assistants are becoming more integrated into our daily browsing, and that convenience comes with risks. BragJack is a wake-up call that even trusted tools can be turned against us. As antidetect browser professionals, we need to stay vigilant and prioritize security in every layer of our setup. So next time you install an extension, ask yourself: is it worth the risk? Because one malicious add-on could be all it takes to bring down your entire operation.