# Browser Hijacker

Published articles for Browser Hijacker.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## BragJack attacks hijack AI browser agents through malicious extensions

DevFeed: [BragJack attacks hijack AI browser agents through malicious extensions](<https://devfeed.tech/articles/bragjack-attacks-hijack-ai-browser-agents-through-malicious-extensions-55324.md>)

Original publisher: [Read original article](<https://www.bleepingcomputer.com/news/security/bragjack-attacks-hijack-ai-browser-agents-through-malicious-extensions/>)

Author: Ax Sharma

Published: 2026-09-19T14:56:31Z

Content type: news

Language: en

Sources: [BleepingComputer](<https://devfeed.tech/sources/bleepingcomputer.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [WebExtension](<https://devfeed.tech/topics/webextension.md>), [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [Google Chrome](<https://devfeed.tech/topics/google-chrome.md>), [Claude](<https://devfeed.tech/topics/claude.md>), [Edge](<https://devfeed.tech/topics/edge.md>), [anthropic](<https://devfeed.tech/topics/anthropic.md>), [Chromium](<https://devfeed.tech/topics/chromium.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [attacks](<https://devfeed.tech/tags/attacks.md>), [browser](<https://devfeed.tech/tags/browser.md>), [browser-agents](<https://devfeed.tech/tags/browser-agents.md>), [browser-hijacker](<https://devfeed.tech/tags/browser-hijacker.md>), [chrome](<https://devfeed.tech/tags/chrome.md>), [chromium](<https://devfeed.tech/tags/chromium.md>), [claude](<https://devfeed.tech/tags/claude.md>), [computer-help](<https://devfeed.tech/tags/computer-help.md>), [computer-security](<https://devfeed.tech/tags/computer-security.md>), [computers](<https://devfeed.tech/tags/computers.md>), [cves](<https://devfeed.tech/tags/cves.md>), [edge](<https://devfeed.tech/tags/edge.md>), [exploit](<https://devfeed.tech/tags/exploit.md>), [extensions](<https://devfeed.tech/tags/extensions.md>), [google](<https://devfeed.tech/tags/google.md>), [hijack](<https://devfeed.tech/tags/hijack.md>), [infosec](<https://devfeed.tech/tags/infosec.md>), [infosec-computer-security](<https://devfeed.tech/tags/infosec-computer-security.md>), [linux](<https://devfeed.tech/tags/linux.md>), [mac](<https://devfeed.tech/tags/mac.md>), [malware](<https://devfeed.tech/tags/malware.md>), [malware-removal](<https://devfeed.tech/tags/malware-removal.md>), [microsoft](<https://devfeed.tech/tags/microsoft.md>), [security](<https://devfeed.tech/tags/security.md>), [spyware](<https://devfeed.tech/tags/spyware.md>), [support](<https://devfeed.tech/tags/support.md>), [tech-support](<https://devfeed.tech/tags/tech-support.md>), [technical-support](<https://devfeed.tech/tags/technical-support.md>), [virus](<https://devfeed.tech/tags/virus.md>), [virus-removal](<https://devfeed.tech/tags/virus-removal.md>), [windows](<https://devfeed.tech/tags/windows.md>)

### AI overview

A proof-of-concept attack called BragJack can hijack AI assistants built into several Chromium-based browsers through a malicious browser extension. The technique abuses browser extension network-request rules to execute code in an AI assistant context and potentially access sensitive browser capabilities. The research produced two CVEs and more than $20,000 in vendor bug bounties.

### Source excerpt

BragJack, a proof-of-concept attack from Forever Security's Gal Weizman, hijacks the AI assistants in Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in Chrome using one malicious extension. The Prompt Forcing technique earned over $20,000 in bounties and two CVEs. [...]