• Latest
  • All
  • How To
AI-powered chrome extension

Two-Thirds of Popular AI Chrome Extensions Pose Serious Threats to User Privacy and Security

August 8, 2023
BURN Secures $5 Million to Bring Clean Cooking to Kenyan Homes

BURN Secures $5 Million to Bring Clean Cooking to Kenyan Homes

May 17, 2025
Safaricom Quickmart partnership

Safaricom 4G and 5G Routers Now Available at Quickmart Stores

May 17, 2025
SEACOM tech student programs

SEACOM Brings Learning to Life for Tech Students

May 17, 2025
Safaricom 5G for Business

How Safaricom 5G is Revolutionizing Enterprise Connectivity

May 17, 2025
DHgate Tablet Cases deals
KEMIS

KEMIS: Kenya’s New Education Data System Set to Replace NEMIS in 2025

May 17, 2025
White Genocide

Grok AI Goes Off the Rails with Bizarre Conspiracy Responses

May 17, 2025
Google One

Google One Hits 150 Million Users, Thanks to AI Premium Plan

May 17, 2025
4K video uploads X

Say Hello to 4K Video Uploads on X

May 17, 2025
openai-chatgpt

ChatGPT Will Soon Be Able to Record, Transcribe & Summarize Meetings

May 17, 2025
Telegram

Telegram Shuts Down $35 Billion Crypto Black Markets

May 17, 2025
Peak Points

AI Will Now Help YouTube Choose the Perfect Moment for Ads

May 17, 2025
Safaricom-IXAfrica-Centres-1

Safaricom Partners with iXAfrica to Build Region’s First AI-Ready Data Centre

May 17, 2025
Techweez | Tech News, Reviews, Deals, Tips and How To
  • News
  • Entertainment
  • Reviews
  • Features
  • Editorial
No Result
View All Result
Techweez | Tech News, Reviews, Deals, Tips and How To
  • News
  • Entertainment
  • Reviews
  • Features
  • Editorial
No Result
View All Result
Techweez | Tech News, Reviews, Deals, Tips and How To
No Result
View All Result

Two-Thirds of Popular AI Chrome Extensions Pose Serious Threats to User Privacy and Security

ElvyLewis Ndungu by ElvyLewis Ndungu
August 8, 2023
in News
Reading Time: 5 mins read
252
0
AI-powered chrome extension

A report by Incogni has revealed that two-thirds of popular AI Chrome extensions could wreak havoc on user security if turned malicious. The report draws to the importance of understanding the trade-offs between convenience vs user privacy and security when using these extensions.

“AI Chrome extensions offer undeniable convenience, but safeguarding your privacy and security should be a top priority. Understanding the data you share with extensions and their reliability in keeping it safe is crucial. By being cautious in choosing AI Chrome extensions and staying informed about their potential risks, users can embrace the benefits of AI while safeguarding their personal information,” advises Darius Belejevas, Head of Incogni.

The study analyzed 70 popular AI-powered extension extensions across 7 categories examining their risk metrics, permission requirements, and data collection practices. According to Incogni, the potential dangers associated with some AI extensions may be greater than you think.

Key Insights

  • 69% of investigated extensions have a high-risk impact (if turned malicious, they could be highly damaging to users’ cybersecurity).
  • 10 out of 10 AI-powered writing extensions have a high-risk impact (could do a lot of harm).
  • 10 out of 70 analyzed extensions have a high-risk impact and a high-risk likelihood (are more likely to turn malicious).
  • Over 59% of the investigated extensions collect user data, with 44% of them collecting personally identifiable information (PII).

Risk Impact and risk likelihood of the studied extensions

Risk impact is a measure based on the number of permissions requested by the extension. Extensions with a low-risk impact score can’t do much harm, even if they get into the wrong hands. Extensions with a high-risk impact, on the other hand, could be highly damaging if they get into the wrong hands because of the data they have access to. 

Risk likelihood is related to the perceived probability of a Chrome extension turning malicious. According to Incogni, it is derived by considering the publisher’s and extension’s reputation on the Chrome Web Store, how long the extension has been available on the store, and other data points concerning the extension.

The majority of AI Chrome extensions analyzed have a high-risk impact (48 out of 70 have a high or very high-risk impact). However, 29 of those are low-risk likelihood.

All 10 AI-writing extensions analyzed were found to have a high-risk impact. In fact, this group alone accounted for over 20% of all high-risk impact extensions.

Source: Incogni

In addition, the research found 10 extensions that had both a high-risk impact and high-risk likelihood across various categories with the most common being personal assistants and audio-visual generators.

Permissions requested

The permissions requested by these extensions dictate how much access and control over your browser, system and data they have. The potential damage if certain permissions (for example the webRequest permission allows an extension to “observe and analyze traffic to intercept, block or modify requests in flight”) given to the extension get into the wrong hands could be too critical.

Each of the studied extensions requested 3.7 permissions on average with AI-powered personal assistants requesting up to 5. AI-powered coding assistants required fewer permissions on average (2.3). Some of the frequently requested permissions include tabs, storage and contextMenus.

Some permissions with a broad range of implications include:

  • activeTab, required by 22/70 extensions which allow the extension access and control to the currently opened site. This permission can allow an extension to scan and manipulate the contents of the site.
  • Scripting, which was required by 17/20 of the studied extensions(including Grammarly, Quilibot and ChatGPT). This allows the extension to inject JavaScript and CSS code into a user’s webpage. This can change the content and layout of the page.
  • webRequest, required by 6/70 extensions. This extension can monitor and modify data sent between users and the websites they visit.

User Data collected

The AI-powered extensions studied collected an average of 1.4 data points each, including those that claimed they did not collect any data points at all.

Each of the seven categories contained at least one extension that collected Personally Identifiable Information (PII), user activity and website content. On the other hand, none of the extensions collected “health information”.

The researchers add, “Namely, it was observed that 31 out of 70 (44%) extensions collect personally identifiable information, which can include things like the user’s name, address, and identification number. 15 out of 70 (21%) extensions collect user activity, which can contain network monitoring and mouse position or keystroke logging. Lastly, 8 out of 70 (11%) extensions collect users’ locations.”

Overview of the 5 most popular AI Chrome extensions

Source: Incogni

Below are the top 5 AI-powered Chrome extensions:

  • Grammarly is the most popular Chrome extension with 10 million users. The extension requests 5 permissions including Scripting with users giving up 5 data points including PII, user location and activity. Grammarly was found to have a high risk-impact with a very low-risk likelihood.
  • QuilliBot is the second most popular Chrome extension with 2 million users. Users grant QuilliBot 7 permissions including activeTab and scripting while also giving up 4 data points including website content, PII, location and user activity. The extension was found to have a high-risk impact with a very low-risk likelihood.
  • WebGPT: ChatGPT with internet access. The extension does not collect any data points and only asks for storage permission. WebGPT: ChatGPT with internet was found to have a high-risk impact and a very high-risk likelihood.
  • Monica is the fourth most popular Chrome extension. The user gives up 4 data points including PII, personal communications, and financial and payment information. The extension also requests 3 permissions including scripting. Monica was found to have a high-risk impact with a low-risk likelihood.
  • ChatGPT for Search – Support GP4. The extension does not collect any data points but asks for 4 permissions, including scripting. It has moderate risk impact and likelihood.

Despite the boost in performance and enhanced browsing experience AI-powered offered by AI-powered extensions, it is important to consider their associated risk metrics, user permissions required as well data collected.

Tags: Google
SendShare147Tweet92
ElvyLewis Ndungu

ElvyLewis Ndungu

Just a guy who loves to code and has a passion for storytelling | Bringing you the latest on all things tech. You can reach me via [email protected] or on Twitter.

Related Posts

Google One

Google One Hits 150 Million Users, Thanks to AI Premium Plan

May 17, 2025
Advanced Protection feature

Google Expands Advanced Protection in Android 16 to Tackle Spyware Threats

May 17, 2025
Google keep

You Can Now Bold and Format Text in Google Keep on the Web

May 13, 2025
Google Logo

Google Unveils New ‘G’ Logo with Gradient Design After 10 Years

May 13, 2025
Google messages

Google Messages Rolls Out New Features Including Delete for Everyone

May 12, 2025
Apple Smart Glasses

Apple Is Making Its Own Chip for Smart Glasses Coming by 2027

May 9, 2025

Latest

BURN Secures $5 Million to Bring Clean Cooking to Kenyan Homes

BURN Secures $5 Million to Bring Clean Cooking to Kenyan Homes

May 17, 2025
Safaricom Quickmart partnership

Safaricom 4G and 5G Routers Now Available at Quickmart Stores

May 17, 2025
SEACOM tech student programs

SEACOM Brings Learning to Life for Tech Students

May 17, 2025
Safaricom 5G for Business

How Safaricom 5G is Revolutionizing Enterprise Connectivity

May 17, 2025
KEMIS

KEMIS: Kenya’s New Education Data System Set to Replace NEMIS in 2025

May 17, 2025
White Genocide

Grok AI Goes Off the Rails with Bizarre Conspiracy Responses

May 17, 2025

Best devices

budget smartwatches 2025

Best Budget Smartwatches To Buy in Kenya 2025

February 13, 2025

Best Infinix Smartphones To Buy in Kenya 2024

February 13, 2025

Best Laptops for Battery Life in 2024

August 21, 2024

Best “Battery Warrior” Smartphones To Buy in 2024

August 22, 2024

BURN Secures $5 Million to Bring Clean Cooking to Kenyan Homes

May 17, 2025

Safaricom 4G and 5G Routers Now Available at Quickmart Stores

May 17, 2025

Techweez is a fast growing influential source of technology news, reviews and analysis by leading tech geeks in the industry.

Follow Us

Editorials

Samsung QLED TVs Now Officially Certified for Real Quantum Dot Technology

Trump’s Tariffs Will Be the End of Affordable Tech

5 Ways to Prep Your Tech for Resale

The Weaponization of PDFs: How Cybercriminals Are Exploiting a Trusted Format

Introducing A Brainbox Quiz: Techweez’s Monthly Trivia Night!

5 Most Reliable Virtual Dollar Card Providers in Nigeria

More News

Google One Hits 150 Million Users, Thanks to AI Premium Plan

Say Hello to 4K Video Uploads on X

ChatGPT Will Soon Be Able to Record, Transcribe & Summarize Meetings

Telegram Shuts Down $35 Billion Crypto Black Markets

AI Will Now Help YouTube Choose the Perfect Moment for Ads

Safaricom Partners with iXAfrica to Build Region’s First AI-Ready Data Centre

  • Terms Of Use
  • Techweez Brand
  • Privacy & Policy
  • Contact Us

© 2024 Techweez - Palahala Media Group may earn a commission when you buy through links on our sites.
A Palahala Media Group Brand. All rights reserved.
.

Welcome Back!

Login to your account below

Forgotten Password?

Retrieve your password

Please enter your username or email address to reset your password.

Log In

Add New Playlist

Techweez | Tech News, Reviews, Deals, Tips and How To
Crunchy Cookies 🍪 Ahead!

Hey there! Just a heads-up: we're big fans of cookies - both the digital and edible kind! 🍪 We use our cookies and some from third parties to ensure your browsing experience on our site is smooth sailing and secure.

 

But wait, there's more! We also use cookies to gather stats and insights on how you navigate our site. It's like getting a behind-the-scenes peek at your digital adventures!

 

Don't worry, you're in control. You can adjust your cookie settings anytime to suit your preferences. Feeling curious? Dive into our Privacy Policy for all the juicy details. Happy browsing! 🚀

Functional Always active
Listen, this legal stuff is about as exciting as watching paint dry. But it basically says we only use your stuff for what you asked us to do, and nobody else gets to peek!
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
It's those sneaky cookie crumbs websites leave behind to count visitors, like counting ants at a picnic! Totally harmless, just for fun facts. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
Hey there! Just letting you know we use some fancy gizmos to remember your preferences. This way, we can show you ads that are, well, not completely bananas.
Manage options Manage services Manage {vendor_count} vendors Read more about these purposes
Make cookies
{title} {title} {title}
Techweez | Tech News, Reviews, Deals, Tips and How To
Crunchy Cookies 🍪 Ahead!
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
Listen, this legal stuff is about as exciting as watching paint dry. But it basically says we only use your stuff for what you asked us to do, and nobody else gets to peek!
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
It's those sneaky cookie crumbs websites leave behind to count visitors, like counting ants at a picnic! Totally harmless, just for fun facts. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
Hey there! Just letting you know we use some fancy gizmos to remember your preferences. This way, we can show you ads that are, well, not completely bananas.
Manage options Manage services Manage {vendor_count} vendors Read more about these purposes
Make cookies
{title} {title} {title}
No Result
View All Result
  • News
  • Reviews
  • Features
  • Editorial
  • Automotive
  • Entertainment

© 2024 Techweez - Palahala Media Group may earn a commission when you buy through links on our sites.
A Palahala Media Group Brand. All rights reserved.
.