Threats Tagged 'user privacy'

The article details a significant data breach at SplitVPN exposing 865,336 user emails, hashed passwords, and nearly 58 million connection logs, contradicting the provider's no-logs claim. It provides a verified scope of the leaked data, analyzes the privacy implications, and offers actionable mitigation steps for affected users and organizations.

A popular Chrome VPN extension, FreeVPN.One, with over 100,000 installs has transformed into spyware. Initially legitimate, the extension began capturing screenshots of users' online activities and collecting sensitive information after an update in April 2025. The spyware operates covertly, automatically taking screenshots of every webpage visited and uploading them to an attacker-controlled domain. It also exfiltrates device and location data at installation and startup. The extension's developer provided evasive responses when confronted, claiming the feature was for background scanning of suspicious domains. This incident highlights the potential risks associated with VPN services and the importance of scrutinizing even seemingly trustworthy browser extensions.

MediumMalwareGermanyFranceUnited Kingdom+4#browser security#screenshot capture#freevpn.one