737 Chrome VPN extensions impersonate brands to hijack browser traffic
Brief
Socket researchers have uncovered a sprawling network of 737 Chrome VPN extensions that impersonated legitimate privacy brands, redirected browser traffic through shared SOCKS5 infrastructure, and accumulated more than 75,000 installs. The campaign primarily targeted Russian-speaking users looking for ways to access blocked services such as Instagram, YouTube, and ChatGPT.
Socket’s Threat Research Team identified extensions …
The post 737 Chrome VPN extensions impersonate brands to hijack browser traffic appeared first on CyberInsider .