📝 TL;DR Several popular Chrome extensions were hijacked or built as malware, stealing crypto, passwords, and even AI chat histories from over a million users. If you use AI tools or a browser wallet, you need to treat your extensions like a live security risk today, not a someday problem. 🧠 Overview In the last few days, security researchers and wallet providers have revealed a cluster of serious extension based attacks. A malicious Trust Wallet update drained over 7 million dollars from users, while fake AI extensions quietly siphoned private chat histories and login data from hundreds of thousands of people. These attacks did not require you to click a dodgy link, the only step was installing or auto updating a “trusted” extension from the Chrome Web Store. 📜 The Announcement A compromised Trust Wallet browser extension update, version 2.68, was pushed after attackers obtained a leaked API key. Between December 24 to 26, that update harvested users’ recovery phrases and enabled attackers to drain funds, with losses already estimated above 7 million dollars. At the same time, extensions branded as “Chat GPT for Chrome” and “AI Sidebar with Deepseek” were exposed as spyware, silently exfiltrating private AI chats and session tokens from more than 900,000 users. Other extensions, such as ones named “Phantom Shuttle,” hijacked browser traffic and routed it through attacker controlled servers to steal logins for social and education platforms. At least 35 legitimate extensions were also compromised after developers were phished, letting attackers inject code that stole session cookies and account access. ⚙️ How It Works • Weaponized updates - Attackers get access to a developer account or API key, then push a malicious update to an existing extension that users already trust and have installed. • Seed phrase and wallet theft - In the Trust Wallet case, the rogue version captured private recovery phrases and used them to empty wallets, even if users never typed those phrases recently.

Lot's of super positivity flowing here and that would be great but the more I'm reading posts the more I'm seeing some similar language across different users. Also, the length and perfection of the posts don't seem realistic for supposedly busy entrepreneurs in the middle of a workday.

There’s something about the space between Christmas and New Year’s that makes people want to stack plans. New goals. New habits. New pressure. It feels productive… but most of the time, it’s just more weight. Your next level isn’t hiding in what you add. It’s unlocked by what you finally say no to. No to commitments that drain you. No to goals you picked up out of obligation. No to habits that look good on paper but cost you energy. Growth isn’t always about doing more. Sometimes it’s about protecting your time, focus, and bandwidth so the right things can actually grow. Before you ask, “What do I need to do next year?” Ask this instead: "What am I done carrying into 2026?" That answer will shape your year more than any goal ever will. 👇Drop one thing you’re choosing to say no to next year.

It’s been a while since I’ve posted here. Aside from the holidays, I have spent the last 30 days in full business recovery mode following a disastrous workspace migration in ChatGPT on November 30th. I didn’t want to come back until I had something positive to report. Over the summer, before joining the AI Advantage I launched my startup using a ChatGPT Plus account tied to my personal email. As a (now) professional founder, I eventually realized it was necessary to separate my personal data from my business for IP protection, liability, and future HIPAA compliance with the app I’m building. When I started my ChatGPT account I hadn’t even thought about starting a company yet. Everything was mixed up. All my personal topics and my business building topics were in one account. Which is not a good thing. I knew enough to upgrade to a ChatGPT plus account when I started iterating business ideas, because I did not want them being trained on any of open AI models. I did everything by the book. I followed the documentation and even used ChatGPT to build a migration checklist. What happened next took my business out at the knees. ChatGPT wiped out every last bit of my data. Their support was nonexistent—no apology, no refund, and no path to recovery. $632.00 spent for a two year Business Workspace and nothing to show for it, everything gone. While my "founder discipline" meant I had backed up my core IP and design docs locally, I lost months of context and chat logs that served as the backbone of my cognitive scaffolding system. It was a disaster of epic proportions. I’ll admit it: I cried. Sobbed actually. I’m normally not a crier, but I had worked so damn hard for several months building something that I know is going to help people. I refused to let it be the end. I have spent December reconstituting my operations from the ground up, but I didn't go back to what broke. After learning that this has happened to dozens, if not hundreds of other founders and businesses, I migrated my entire company to Google Business Workspace (Enterprise Standard) and Gemini. The difference in professional stability and support has been night and day. Because of this move, I’ve recovered enough momentum to stay on track for our first product launch this January.