This free Chrome VPN extension found to spy on its 100k+ users uninstall it now
Date:
Thu, 21 Aug 2025 16:58:52 +0000
Description:
A free VPN browser extension was found to take screenshots of every page the users visit. The extension has over 100k downloads and Google Store's "Featured" badge.
FULL STORY ======================================================================Security
researchers found that a popular free Chrome VPN extension has been stealthily taking screenshots of every website its users visit FreeVPN.One boasts over 100,000 downloads and Google's "Verified" and "Featured" badges Once limited to VPN functionality, the extension's later updates were
designed not for privacy, but to evade detection
A popular Chrome VPN extension has been found to spy on its over 100,000 users.
Koi Security published an extensive report, warning users that instead of protecting their data as the best VPN apps should do, FreeVPN.One takes screenshots of every single website they visit.
FreeVPN.One is a free VPN extension that managed to obtain two badges from
the Google Chrome Store, supposedly to further assure users of its security. Unfortunately, those badges might have been mistakenly awarded. A trustworthy VPN extension turned into a privacy nightmare (Image credit: Google)
FreeVPN.One looks legitimate at a glance. With over 100,000 downloads and Google's endorsement, it seems like a secure alternative to paid VPN
services. However, according to Koi Security, there's a sinister reality hiding just underneath the surface.
The extension was marketed as a free, unlimited VPN service, and according to researchers, for a while, it did just that. However, future updates
introduced a worrying development.
Koi Security reports that just seconds after any page loads, a background trigger grabs a screenshot of it. This means that every website you visit
with the extension enabled is captured, including private photos, banking sites, medical records, and all kinds of other sensitive information.
The screenshots are then sent to an external source, with scripts running to ensure the quality of data capture. Even private pictures were sent to FreeVPN.Ones backend, as per Koi Security findings (Image credit: Koi Security)
Another feature in FreeVPN.One, called "AI Threat Detection," also takes screenshots and uploads them for server-side analysis, but at least this one discloses that it does that, whereas the rest of the app does not.
A few of the most recent updates to FreeVPN.One appears to have made things worse for user privacy. The spyware , screenshots, and location tracking allegedly started in July of this year. Later that same month, Koi Security reported, the developer upped the security to evade detection, all the while the screenshots continued being collected.
Koi Security reached out to the developer, who claims that screenshots are only taken if the domain appears suspicious. However, even websites like Google Photos are recorded, which doesn't line up with that claim. The dev also says that the screenshots are not stored anywhere, but this is a difficult claim to verify. They eventually allegedly stopped responding to
Koi Security's requests for comment. How to stay safe?
This situation outlines a larger problem with certain free VPNs, as well as the ease with which certain developers can upload malicious apps into web stores and gain user trust. Just recently, a VexTrio Viper, a group of cybercriminals, successfully shared a long list of malicious apps through popular app stores. This included a free VPN, ad blocker, and even an online dating service.
FreeVPN.One scored Google Play Store's "Verified" badge, which should have meant it was definitely secure , but it sounds rather like "it's best avoided."
If you used the FreeVPN.One extension, we recommend that you uninstall it immediately. Consider downloading one of the best antivirus programs to give your PC a thorough scan, too.
Next, it's time to change your passwords to just about every website you may have accessed while using the extension. Better to be safe than sorry.
This highlights just how important it is not to take chances when using a VPN service, which, by default, often has pretty hefty permissions when it comes to monitoring what you do. If you aren't willing to get a premium service, turn to some of the best free VPN services to ensure they have been
thoroughly tested in order to protect your data. You might also like
"Scammers scamming other scammers" This free Android VPN was caught using Windscribe-stolen servers To pay or not to pay? Nearly 1 in 4 TechRadar readers say they use free VPNs despite the risks This fake VPN could have
been spying on you all this time
======================================================================
Link to news story:
https://www.techradar.com/vpn/vpn-privacy-security/this-free-chrome-vpn-extens ion-found-to-spy-on-its-100k-users-uninstall-it-now
--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)