GoKawiilChrome Web Store's 'Featured' Poper Blocker Extension Found Stealing User Data
Researchers at Bay Area Labs say the Chrome extension Poper Blocker, which has over 2 million users and Google's 'Featured' and 'Established Publisher' badges, secretly collects browsing histories, screenshots and AI chatbot interactions. The extension uses code obfuscation and sandbox detection to avoid discovery, and the researchers say two other apps from the same developer, flagged as spyware nearly a decade ago, remain featured on the store. Bay Area Labs reported Poper Blocker to Google in May 2026 but says no action has been taken.
GoKawiil's interpretation of the reporting above, not reported fact.
The finding suggests Google's vetting badges may not reliably signal safety, potentially undermining user trust in the Chrome Web Store's review and certification process. If spyware can earn 'Featured' status and persist despite researcher reports, it raises questions about how effectively Google monitors extensions with large install bases and long operating histories.
- Poper Blocker, a Chrome extension with 2M+ users, allegedly exfiltrates browsing data, screenshots and AI chat logs
- It carries Google's 'Featured' badge and 'Established Publisher' status despite the alleged spyware behavior
- Two other extensions from the same developer, flagged as spyware years ago, remain listed as featured
Malwarebytes Premium Security Software — Given how easily malicious extensions like Poper Blocker slip past app store vetting, having dedicated anti-malware software running alongside your browser adds a crucial extra layer of defense. Malwarebytes Premium actively scans for spyware and infostealers, helping catch threats that disguise themselves as legitimate ad blockers before they can exfiltrate your data.”,
See Malwarebytes Premium Security Software on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: darkreading.com — Nate Nelson, 2026-09-28
Published there as: “Chrome Store Hosts 'Poper Blocker' Spyware Downloaded by Millions”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.