> TritonInfoSec News
Home / Aug 14, 2026 / Story
0
#9 BleepingComputer general August 12, 2026 at 18:54 UTC

Hundreds of fake Chrome VPN extensions route traffic through a proxy

By Bill Toulas

AI Summary

Over 737 malicious Chrome extensions impersonating well-known VPN and proxy services were found routing user traffic through SOCKS5 proxies operated by a single provider, with 274 extensions impersonating 66 legitimate brands across at least 40 developer accounts, accumulating 75,486 installs. The extensions primarily targeted Russian-speaking users seeking access to blocked content. Security teams should audit browser extension policies and block unapproved extensions via enterprise controls.

Read full article → https://www.bleepingcomputer.com/news/security/hun…

Relevance score: 80.0/100

# More from August 14

  1. 1
    Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor The Hacker News
  2. 2
    Nightmare Eclipse Drops Windows Zero-Day Exploit ‘ShieldBreak’ SecurityWeek
  3. 3
    Attackers Exploit SharePoint Authentication Bypass After Public PoC Release The Hacker News
  4. 4
    Critical VMware vCenter RCE flaw exploited for reverse SSH access BleepingComputer
  5. 5
    Over 2,500 Organizations Impacted by LiteLLM Supply Chain Attack SecurityWeek
  6. 6
    White House taps security firms for offensive hack-back operations BleepingComputer
  7. 7
    OpenAI, Anthropic, Google API Flaw Let Weaker AI Models Decode Stronger Models' Reasoning The Hacker News
  8. 8
    New Microsoft Defender 'ShieldBreak' zero-day grants SYSTEM privileges BleepingComputer
  9. 10
    Android malware combo takes out loans and relays victims' credit cards BleepingComputer