browser extension malware

737 Malicious Chrome VPN and Proxy Extensions Intercepting Browser Traffic Discovered

Security researchers have identified 737 free VPN and proxy extensions in the Chrome Web Store that primarily target Russian-speaking users seeking access to blocked services. The extensions, published across at least 40 developer accounts, have accumulated approximately 75,486 installs. Once installed, the extensions intercept browser traffic and route it through attacker-controlled proxy infrastructure, enabling potential traffic interception and data theft. Of the identified extensions, 274 have been found to impersonate 66 legitimate services. Google Chrome is the affected platform.