aiqbench takeAI Safety

This campaign exploits Chrome's proxy APIs to hijack browser traffic through dynamically updated external infrastructure, bypassing the need for extension updates. The technique grants operators broad network visibility and control over user data without requiring new permissions, representing a significant threat model for browser security research.

Sources coveringCybersecurity News, The Verge

What this isA model's reading of the article and related coverage, written for aiqbench. Not the publisher's words.

Fake VPN Extensions Hijack Browser Traffic Through Hidden Proxy Servers

Cybersecurity NewsSeptember 29, 20263 min read

A coordinated cluster of 31 Russian-language Chrome extensions that present themselves as convenient “VPN for X” tools while quietly steering browser traffic through remotely controlled proxy infrastructure. Disclosed by Risky Plugins on September 19, 2026, the campaign remained active when documented and had accumulated roughly 356,000 installations, giving its operators a substantial traffic-routing footprint. The […] The post Fake VPN Extensions Hijack Browser Traffic Through Hidden Proxy Servers appeared first on Cyber Security News.

Excerpt shown under the publisher's RSS terms · 61 words · full text and figures are on the publisher's site

Read at Cybersecurity News ↗Ask about this article