Tag: google web store

2 Attack Reports | 0 Vulnerabilities

Attack reports

Legitimate Chrome VPN Extension Turns to Browser Spyware

A popular Chrome VPN extension, FreeVPN.One, with over 100,000 installs has transformed into spyware. Initially legitimate, the extension began capturing screenshots of users' online activities and collecting sensitive information after an update in April 2025. The spyware operates covertly, automa…
spyware
vpn
data exfiltration
chrome extension
browser security
google web store
2025-08-19
screenshot capture
freevpn.one
user privacy
Published: August 19, 2025
Downloadable IOCs: 3

Data-stealing Chrome extensions impersonate Fortinet, YouTube, VPNs

A campaign targeting the Google Chrome Web Store has deployed over 100 malicious browser extensions masquerading as legitimate tools like VPNs, AI assistants, and crypto utilities. These extensions, while offering some promised functionality, secretly connect to threat actor infrastructure to steal…
data theft
browser security
malicious domains
chrome extensions
2025-05-22
google web store
remote script execution
cookie stealing
vpn impersonation
Published: May 22, 2025
Downloadable IOCs: 25
Click here to see more Attack Reports