AI Sidebar Spoofing Attack: SquareX Uncovers Malicious Extensions that Impersonate AI Browser Sidebars - Tech Startups

AI Sidebar Spoofing Attack: SquareX Uncovers Malicious Extensions that Impersonate AI Browser Sidebars - Tech Startups

Palo Alto, California, 23rd October 2025, CyberNewsWire The post AI Sidebar Spoofing Attack: SquareX Uncovers Malicious Extensions that Impersonate AI Browser Sidebars first appeared on Tech Startups.

This Hidden Comet/Atlas AI Browser Flaw That Hackers Are Exploiting

SquareX Labs demonstrates a practical, low-friction attack class — AI Sidebar Spoofing — where a malicious browser extension or attacker-controlled page injects a visually identical, writable AI sidebar into the browser UI, relays user prompts to real LLMs and selectively manipulates procedural responses to cause credential theft, OAuth consent exfiltration, remote code execution, and device takeover. The technique exploits trusted UX, commonpla…

AI sidebar spoofing attack exploits trust in browser extensions

SquareX reveals AI sidebar spoofing attacks via malicious browser extensions tricking users into revealing credentials across top browsers like Edge and Safari.

AI browsers can be abused by malicious AI sidebar extensions: Report

AI browsers may be smart, but they’re not smart enough to block a common threat: Malicious extensions. That’s the conclusion of researchers at SquareX, who on Thursday released a report showing how attackers can exploit AI sidebars through compromised browser extensions. This attack vector isn’t new. Malicious extensions have been inserted into browser web stores to infect standard browsers such as Chrome, Edge, Firefox, and others for years. Wh…

SquareX Uncovers Malicious Extensions That Impersonate AI Browser Sidebars – Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto And More - Cybernoz - Cybersecurity News

Palo Alto, California, October 23rd, 2025, CyberNewsWire SquareX released critical research exposing a new class of attack targeting AI browsers. The AI Sidebar Spoofing attack leverages malicious browser extensions to impersonate trusted AI sidebar interfaces, which is used to trick users into executing dangerous commands that can lead to credential theft, device hijacking, and password exfiltration. The research demonstrates how attackers can …