737 Chrome VPN extensions impersonate brands to hijack browser traffic

Socket researchers have uncovered a sprawling network of 737 Chrome VPN extensions that impersonated legitimate privacy brands, redirected browser traffic through shared SOCKS5 infrastructure, and accumulated more than 75,000 installs. The campaign primarily targeted Russian-speaking users looking for ways to access blocked services such as Instagram, YouTube, and ChatGPT. Socket’s Threat Research Team identified extensions …

The post 737 Chrome VPN extensions impersonate brands to hijack browser traffic appeared first on CyberInsider.