737 Chrome VPN Extensions Linked to Brand Impersonation and Browser Traffic Redirection
George B. — Senior Software Engineer
Not every cyberattack starts with an exploit—sometimes it starts with a download.
Socket uncovered a campaign of 737 Chrome VPN extensions impersonating 66 legitimate VPN brands, with more than 75,000 installs. Many silently routed users’ browser traffic through attacker-controlled SOCKS5 proxies.
One of the oldest lessons in security still applies: the weakest link is often trust. Always verify the publisher—not just the name or icon.
https://socket.dev/blog/chrome-vpn-extension-impersonation
2 reactions · 0 comments