Get the latest tech news
Chrome VPN Extension With 100k Installs Screenshots All Sites Users Visit
FreeVPN.One, a verified Chrome extension with over 100k installs on the Chrome Web Store, is taking screenshots of sites users visit.
A Koi Security investigation of the VPN tool reveals that it has been capturing full-page screenshots from users’ browsers, logging sensitive visual data like personal messages, financial dashboards, and private photos, and uploading it to aitd[. Koi Security further explains that the latest version of the extension, v3.1.4, introduced AES-256-GCM encryption with RSA key wrapping to obfuscate the exfiltrated data, making it harder to detect or analyze with network monitoring tools. In any case, it would be advisable to change passwords for any services accessed through Chrome while the extension was active on your browser, and consider using independently audited VPN providers with transparent privacy policies and data handling practices.
Or read this on r/technology
