Chrome extensions spying on users' browsing data
qcontinuum.substack.com
February 11, 2026
11 min read
🔥🔥🔥🔥🔥
67/100
Summary
An automated scanning pipeline identified 287 Chrome extensions that exfiltrate browsing history, collectively installed on approximately 37.4 million devices. This represents around 1% of the global Chrome user base.
Key Takeaways
- An automated scanning pipeline identified 287 Chrome extensions that exfiltrate browsing history, collectively installed on approximately 37.4 million devices.
- The extensions flagged for data leakage are linked to various actors, including Similarweb, Curly Doggo, and Chinese data brokers.
- The methodology used for detection involved monitoring outbound traffic and correlating it with URL lengths to identify potential data leaks.
- The findings highlight ongoing concerns about privacy and data exfiltration through seemingly innocuous browser extensions.
Community Sentiment
Positives
- Using open source extensions like uBlock Origin allows users to audit the code, enhancing trust and security in their browsing experience.
- The ability to research and monitor updates for extensions can help users protect themselves from potential data exfiltration.
Concerns
- The Chrome Web Store's lack of regulation enables bad actors to purchase legitimate extensions and exploit user data.
- There is a growing concern that even trustworthy extensions can become malware after being bought out, eroding user trust.
