737 Chrome VPN Extensions Were Caught Hijacking Traffic. Here's What to Check

Robert Moore · 2026-08-12

If you've ever grabbed a free VPN extension from the Chrome Web Store to watch a blocked video or get around a geo-restriction, you might want to sit down for this one. Security researchers just uncovered a massive network of 737 free VPN and proxy extensions that were quietly intercepting browser traffic and rerouting it through a proxy infrastructure. And get this—they weren't just collecting data; they were doing it in a way that could expose your browsing habits, passwords, and personal info to complete strangers. The extensions were spread across at least 40 different Chrome Web Store developer accounts, which is a classic trick to make them look like separate, unrelated tools. In total, they racked up a staggering 75,486 installs. That's not millions, but it's plenty of real users who now need to wonder if their private browsing sessions were being watched. Of those identified, 274 extensions were found to be impersonating 66 legitimate tools, like popular VPN services or ad blockers. That means if you thought you were downloading a trusted app, you might have actually installed a spy. ### Who Was Targeted and Why The researchers found that these extensions were primarily aimed at Russian-speaking users looking to access blocked services. If you're in a country with strict internet censorship, you're more likely to download a VPN, and these scammers knew that. They capitalized on the desperation of people just trying to get information or stream content that's otherwise off-limits. But here's the kicker: the proxy infrastructure they routed traffic through wasn't just for anonymity. It could be used to inject ads, steal login credentials, or even modify web pages to trick you into entering sensitive data. ### How to Check If You Have One So, how do you know if you're one of the 75,486 affected? Here's a quick checklist to run through right now: - Open your Chrome browser and go to the extensions page by typing `chrome://extensions` in the address bar. - Look for any VPN or proxy extensions you don't remember installing, or ones with weird names or generic icons. - Check the developer name. If it's a random string of letters or a company you've never heard of, that's a red flag. - Review the permissions each extension has. If a VPN asks for access to all your data on all websites, that's a huge warning sign. - Remove any suspicious extensions immediately. Don't just disable them—uninstall them completely. ### What to Do Next If You're Affected If you found a suspicious extension, don't panic, but do take action. First, uninstall it. Then, change your passwords for any accounts you've accessed while it was installed, especially email, banking, and social media. You should also clear your browser's cache and cookies to remove any tracking scripts that might have been left behind. Consider running a full malware scan on your computer, because some of these extensions can leave behind persistent files even after removal. ### The Bigger Picture: Why Free VPNs Are Risky This incident is a stark reminder that "free" often comes with a hidden cost. Running a VPN service costs money—for servers, bandwidth, and maintenance. If you're not paying for it, the provider has to make money somehow, and sometimes that means selling your data or, worse, using your device for malicious purposes. The best approach is to stick with reputable, paid VPN services that have a transparent privacy policy and a track record of independent audits. Or, if you're just trying to bypass a geo-block, consider using a trusted proxy service or even a free tier from a well-known provider, but always read the fine print. ### Final Thoughts This isn't about scaring you away from all browser extensions—plenty of them are legitimate and useful. It's about being a smarter, more cautious user. Before you install anything, take a minute to check the developer, read the reviews (especially the negative ones), and look at what permissions it's asking for. If something feels off, trust your gut and move on. Your privacy is worth more than a few extra seconds of convenience.