NTISB Issues Advisory on VPNs and AI Chatbot Usage

The National Telecom and Information Technology Security Board (NTISB) has issued a cybersecurity advisory warning Pakistani users about the risks of using certain browser extensions that could compromise their personal data.

The advisory highlights tools such as ChatGPT-4, Gemini for Chrome and more than a dozen others being targeted by hackers to steal private information. The board specifically alerts users who rely on virtual private networks (VPNs) and artificial intelligence-powered tools about the growing threats posed by hackers employing phishing techniques. These hackers are reportedly injecting malicious code into legitimate browser extensions, potentially exposing users’ personal identifiable information (PII).

Among the 16 compromised extensions identified are popular tools like AI Assistant – ChatGPT, Bard AI Chat Extension, VPNCity, VidHelper Video Downloader and Trackker – Online Keylogger Tool, among others.

The NTITSB has issued several key recommendations to users to protect their privacy and security:

• Avoid using the affected extensions and opt for alternative trusted options.
• Only install browser extensions from reputable sources.
• Review extension permissions and ratings carefully before installation.
• Regularly update extensions to the latest versions.
• Remove unused extensions from browsers.
• Install and maintain up-to-date antivirus software.
• Remain cautious of free extensions, as they may carry hidden risks.
• Actively monitor system activity for unusual behavior.

The advisory urges users to stay vigilant and take immediate action to safeguard their data.