CTI · reviewed · 2026-09-29

Poper Blocker Chrome extension exfiltrates browsing history

Full story & timeline

MITRE ATT&CK

• T1176 Software Extensions Persistence
• T1113 Screen Capture Collection
• T1119 Automated Collection Collection
• T1567 Exfiltration Over Web Service Exfiltration

Indicators

No curated indicators tied to this case.

Detections

No detection content yet — case analysis did not yield signal-specific telemetry. Check back after the next daily CTI pass.

References

• https://www.darkreading.com/application-security/chrome-store-poper-blocker-spyware-downloaded-millions
• https://amibeingpwned.com/blog/ai-chat-scraper-wall-of-shame
• https://amibeingpwned.com/blog/poper-blocker-the-adblocker-that-spies-on-you
• https://cyberworldops.eu/en/popular-chrome-ad-blocker-accused-of-secretly-harvesting-browsing-and