737 Chrome VPN Extensions Were Caught Redirecting Traffic. Here's What to Do

Michael Miller · 2026-08-12

A massive cleanup just hit the Chrome Web Store, and it's one of those stories that makes you want to double-check every extension you've ever installed. Security researchers uncovered a network of 737 free VPN and proxy extensions that were quietly intercepting browser traffic and routing it through a proxy infrastructure. The worst part? They weren't just collecting data—they were designed to trick users into thinking they were getting privacy while doing the exact opposite. These extensions weren't scattered randomly. They were published across at least 40 different Chrome Web Store developer accounts, which is a classic sign of an organized operation. Together, they racked up 75,486 installs. That might not sound like a huge number compared to mainstream extensions, but for a targeted campaign, it's significant. And here's the kicker: 274 of those extensions were found to be impersonating 66 legitimate products. That's not a coincidence; that's a strategy. ### Who Was Targeted and Why The primary targets were Russian-speaking users looking for ways to bypass regional blocks and access services that are restricted in their area. When you're desperate to reach a blocked site, you're more likely to grab any free VPN that promises a solution. Attackers know this. They prey on urgency and frustration, offering a quick fix that ends up compromising your entire browsing session. The extensions would appear legitimate, often mimicking well-known VPN brands or using names that sounded trustworthy. Once installed, they would redirect your traffic through their own servers, giving the operators full visibility into everything you did online. That includes login credentials, personal messages, and any sensitive data you entered into websites. ### How to Check If You Have One If you're worried you might have installed one of these malicious extensions, here's a quick way to check: - Open Chrome and type `chrome://extensions` in the address bar. - Look through the list for any VPN or proxy extensions you don't remember installing. - Check the developer name. If it's unfamiliar or looks like a random string of characters, that's a red flag. - Review the permissions each extension has. If a VPN extension asks for access to all your browsing data, that's normal. But if it also wants access to your clipboard or camera, something's off. - Remove any extension that seems suspicious, then run a malware scan on your device. It's also worth clearing your browser cache and changing passwords for any accounts you accessed while the extension was active. Better safe than sorry. ### The Bigger Picture: Free Isn't Always Free This incident is a reminder that free tools often come with hidden costs. When you use a free VPN, you're not the customer; you're the product. The developers need to make money somehow, and selling your browsing data or routing your traffic through ad-laden proxies is a common way to do it. That doesn't mean all free VPNs are malicious. There are reputable ones that operate transparently and have solid privacy policies. But the key is to do your research before installing anything. Stick to well-known names, read the privacy policy, and check the developer's website to see if they have a real presence online. ### What Chrome Users Should Do Now If you've installed any free VPN or proxy extension in the past few months, take a few minutes to audit your browser. Remove anything you don't recognize or don't use regularly. Then, consider switching to a trusted VPN service that has a clear track record. It might cost a few dollars a month, but that's a small price to pay for peace of mind. And if you're in the US and using a VPN to access geo-restricted content, remember that your data is still at risk if you're using a shady extension. The same rules apply no matter where you are. Your browsing habits, passwords, and personal information are valuable. Don't hand them over to strangers just because an extension promises free access to a blocked site. This whole situation is a wake-up call. It's easy to get complacent and assume the Chrome Web Store only has safe extensions. But as this discovery shows, bad actors are constantly finding new ways to slip through the cracks. Stay vigilant, check your extensions regularly, and never trust a free tool that seems too good to be true. Because it probably is.