Reported by 3 outlets
Poper Blocker Chrome extension exfiltrates browsing history
Why this score
- Breadth
- 1.50 / 2.0 · 3 sources
- Authority
- 1.50 / 2.0 · best outlet weight
- Severity
- 0.70 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.00 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Desk analysis
Poper Blocker, a Chrome Web Store extension with more than two million users, Featured badge, and Verified status, has been found to exfiltrate full browsing histories, page content, screenshots, and AI chat data. Bay Area Labs classified the extension as Confirmed in its reporting, noting it exfiltrates every URL visited and activates server-side gating after roughly 24 hours. The extension is owned by Big Star Labs LP.
The campaign fits a broader pattern of malicious Chrome extensions using trusted storefront badges to reach large user bases before activating data collection. Events reference a Dark Reading article and Mastodon discussions linking the extension to the same research. The combined event count in the story shows sustained attention rather than a single disclosure.
What to watch: Chrome Web Store removal actions, any response from Big Star Labs, and whether other extensions in the same cluster are identified and blocked.
Timeline
-
original reporting
🤖 Chrome Web Store still hosts 'Poper Blocker' — 2M+ users, Featured badge, 4.8★ — yet researchers found it exfiltrates full browsing histor
www.darkreading.com · 15d ago · September 28th, 2026
🤖 Chrome Web Store still hosts 'Poper Blocker' — 2M+ users, Featured badge, 4.8★ — yet researchers found it exfiltrates full browsing histor
via Mastodon https://www.darkreading.com/application-security/chrome-store-poper-blocker-spyware-downloaded-millions
-
update from amibeingpwned.com
The AI Chat Scraping Extension Wall of Shame
amibeingpwned.com · 156d ago · May 11th, 2026
Bay Area Labs listed Poper Blocker among seven Chrome extensions with a combined 7M+ installs that scrape AI chats or have the infrastructure to do so. The post, dated 11 May 2026, classifies Poper Blocker as Confirmed, noting it exfiltrates every URL visited and uses server-side gating that activates after about 24 hours. The extension is owned by Big Star Labs LP, carries Featured and Verified badges, and has 2M users.
-
update from amibeingpwned.com
Poper Blocker: The Adblocker That Spies on You
amibeingpwned.com · 15d ago · September 28th, 2026
submitted by /u/acorn222 [link] [comments]
via reddit r/cybersecurity: Poper Blocker: The Adblocker That Spies on You
-
update from cyberworldops.eu
Bay Area Labs reports Poper Blocker, a Chrome extension with 2M+ users, exfiltrated browsing histories, page content, screenshots and AI cha
cyberworldops.eu · 15d ago · September 28th, 2026
Bay Area Labs reports Poper Blocker, a Chrome extension with 2M+ users, exfiltrated browsing histories, page content, screenshots and AI cha
via Mastodon https://cyberworldops.eu/en/popular-chrome-ad-blocker-accused-of-secretly-harvesting-browsing-and
-
update from www.darkreading.com
Poper Blocker spyware in the Chrome Web Store downloaded by millions
www.darkreading.com · 14d ago · September 29th, 2026
Reporting by Bay Area Labs, covered by Dark Reading, further describes Poper Blocker harvesting page content, screenshots, and AI chat conversations from browsers where it is installed.