This Chrome VPN extension secretly spies on you

Browser extensions can improve convenience, but some browsers make far more money than they pay. A new one Koi Safety Report Say a freevpn. One, one Chrome extension With over 100,000 installations, even “featured” badges, it’s been secretly taking screenshots of users browsing meetings.

Sign up for my free online report
Get my best technical tips, emergency security alerts, and exclusive deals delivered directly to your inbox. Plus, you’ll be visiting my Ultimate Scam Survival Guide now – Free when joining me cyberguy.com/newsletter

How AI can now help hackers spoof your browser’s security tool

How to freevpn. A secret to capture your browsing

After installation, FreeVPN. A handles not only VPN traffic. It silently captures screenshots, bank logins, private photos, sensitive documents from each website you visit and sends them to a server controlled by the developer.

Worse, the extension gradually added licenses, masking its activity as “AI threat detection.” What looks like useful features become a tool for continuous background monitoring.

Why is this chrome expansion so dangerous

People install VPNs to protect their privacy. Instead, this extension tilts this expectation. By using Chromeand script permissions, FreevPn. One can access every page you open.

KOI security researchers tested the extension and confirmed that it captured screenshots even on trusted sites like Google Photos and Google Sheets. The developers claim that the images are not stored, but provide no evidence.

Malicious browser extension captures 2 million users’ espionage

Warning signals for unsafe free VPN extensions

There are always red flags:

• Awkward grammar and poor written description.
• The universal WIX page is the only developer “contact”.
• There is no clear business model promise of unlimited, free VPN services.

While some free VPNs may work responsibly, most people need a way to make money. If it is not by charging you a fee, it may be by selling your data.

freevpn. One developer response and Google removal

When Koi Security released its discovery, the developers behind FreeVPN provided a partial explanation. He claims that automatic screenshot capture is part of the “background scan” feature and is only used in suspicious domains. He also said that the images were not stored and only briefly analyzed for the threat.

But the researchers observed screenshots taken on trusted sites such as Google Photos and Google Sheets that did not fit that explanation. The developer stopped responding when asked to provide proof of legality, such as company profiles, GitHub repository, or professional contacts. The only public links associated with the extension result in the basic Wix launcher page.

FreeVPN. One has been removed from the Chrome web store. An attempt to access its page now returns a message: “This project is not available.”

Deletion reduces the risk of new downloads, but it also highlights the disturbing gap. The extension took months to do spyware behavior while still carrying a proven tag, raising questions about how to thoroughly update the featured extension.

Google fixes another actively exploited chrome safety flaw

Steps to protect yourself from VPN extension spyware

If you already have FreeVPN.ONE or any suspicious Chrome VPN extension installed, follow these steps if you are concerned about network security:

1) Uninstall now

go Chromium alloy > window > Extended Then click eliminate.

2) Use a trustworthy VPN

Stick to reliable VPN providers that have been long-tested, audited policies and transparent operations. By choosing a legitimate VPN, you can control privacy rather than hand it over to anonymous developers. A reliable VPN is also crucial to protecting your online privacy and ensuring security, high-speed connections are also critical.

For the best VPN software, see my expert review of the best VPN to browse the network privately Windows, Mac, Android and iOS devices exist cyberguy.com/vpn

3) Use strong antiviral software to scan the device

Run trusted antivirus tools to check Hidden malware. The best way to protect yourself from installing malware (malicious links that may access private information) is to install powerful antivirus software on all devices. This protection can also remind you about phishing email and ransomware scams, ensuring your personal information and digital assets are secure.

Choose from the Best Antivirus Protection Awards for Your Windows, Mac, Android & iOS Devices cyberguy.com/lockupyourtech

4) Change password

Assume that anything you type or view can be recorded. Consider using a password manager that securely stores and generates complex passwords, reducing the risk of password reuse.

Next, check if your password has been exposed in past vulnerabilities. Our #1 Password Manager (see cyberguy.com/passwords) The draft includes a built-in vulnerability scanner that checks whether your password appears in a known leak. If you find a match, change any reused passwords immediately and protect these accounts with new, unique credentials.

Check out the best expert review password managers in 2025 cyberguy.com/passwords

5) Use personal data deletion services

Extensions like FreeVPN. Even after uninstalling spyware, your personal information may already be circulating on data brokerage sites for marketers, scammers and even cybercriminals. The Personal Data Deletion Service can scan your information on hundreds of brokerage sites and automatically request its information to be deleted. This limits the data your data can be exposed through such expansions.

Check out my preferred data deletion service and scan it for free to see if your personal information is already accessible on the internet cyberguy.com/delete

Do a free scan to find out if your personal information is already on the Internet: cyberguy.com/freescan

6) Check permissions

Before adding any extension, check its requirements. If the VPN wants to access “All websites,“That’s a red flag.

Click here to get the Fox News app

Kurt’s key points

FreeVPN. A reminder that “free” usually comes at a hidden cost. Your data. Don’t think that the extension is safe as it looks popular or comes with a badge. Careful, scrutinize, and use privacy tools that are powered by real companies.

Will you swap your browsing privacy for free tools, or is it time to rethink the cost of “free”? By writing to us, let us know cyberguy.com/contact

Sign up for my free online report
Get my best technical tips, emergency security alerts, and exclusive deals delivered directly to your inbox. Plus, you’ll be visiting my Ultimate Scam Survival Guide now – Free when joining me cyberguy.com/newsletter

Copyright 2025 Cyber​​​​​​​​​​​​​​Guy.com. all rights reserved.