analiza aiqbench
This campaign exploits Chrome's proxy APIs to hijack browser traffic through dynamically updated external infrastructure, bypassing the need for extension updates. The technique grants operators broad network visibility and control over user data without requiring new permissions, representing a significant threat model for browser security research.
Fake VPN Extensions Hijack Browser Traffic Through Hidden Proxy Servers

A coordinated cluster of 31 Russian-language Chrome extensions that present themselves as convenient “VPN for X” tools while quietly steering browser traffic through remotely controlled proxy infrastructure. Disclosed by Risky Plugins on September 19, 2026, the campaign remained active when documented and had accumulated roughly 356,000 installations, giving its operators a substantial traffic-routing footprint. The […] The post Fake VPN Extensions Hijack Browser Traffic Through Hidden Proxy Servers appeared first on Cyber Security News.
A coordinated cluster of 31 Russian-language Chrome extensions that present themselves as convenient “VPN for X” tools while quietly steering browser traffic through remotely controlled proxy infrastructure. Disclosed by Risky Plugins on September 19, 2026, the campaign remained active when documented and had accumulated roughly 356,000 installations, giving its operators a substantial traffic-routing footprint. The extensions target users seeking access to…
Extras afișat conform termenilor RSS ai publicației · 61 cuvinte · textul integral și figurile sunt pe site-ul publicației
Subiecte conexe

Weekly Cyber Security Newsletter Bulletin – Entra ID RCE, Claude Code Ransomware, T-Mobile Cable, Azure Credential Theft +20 Stories
Cybersecurity News · 23 aug. 2026

Top 10 Malware Used by Hackers Last Week to Launch Cyberattacks
Cybersecurity News · 21 iul. 2026

Hackers Hide a Full Remote Access Trojan Inside a Real Exodus Crypto Wallet
Cybersecurity News · 2 sept. 2026

SearchJack Campaign Uses 23 Chrome Extensions to Hijack Searches of 758,000 Users
Cybersecurity News · 15 iun. 2026