Alarming Discovery in Cybersecurity: AI Harvesting Extensions Uncovered
A recent report by Koi Security has raised significant alarms about browser extensions masquerading as privacy tools while engaging in potentially malicious activities. Urban VPN Proxy, a highly-rated browser extension on Google Chrome and Microsoft Edge, is reportedly logging and selling user conversations with various popular AI chatbots, raising serious concerns over user privacy and data security.
The Extent of the Data Harvesting
Koi Security's investigation revealed that Urban VPN Proxy and several other related extensions contain hidden functionalities specifically designed to capture AI conversations. Following an update in July 2025, the extensions—including Urban Browser Guard and 1ClickVPN Proxy—have been logging every interaction with AI platforms, including ChatGPT and Microsoft Copilot, without users’ consent. With a staggering 8 million users affected, the disclosure of such invasive data collection practices is unsettling.
How Data Harvesting Works: Behind the Curtain
Once installed, the Urban VPN Proxy extension injects a script into each web page visited on targeted AI platforms. This script captures and transmits sensitive user interactions, leveraging methods that override standard browser functions. As outlined by security experts, the extension operates continuously in the background—tracking conversations even if users believe their VPN activity is safeguarding their privacy. This raises questions about the trustworthiness of extensions that explicitly market themselves for privacy protection.
Implications of Breached Trust
The implications of these findings extend beyond technical details; they strike at the heart of user trust. Utilizing privacy-focused extensions often leaves users vulnerable when such tools covertly harvest personal data. The instance of Urban VPN Proxy epitomizes the growing tension between users seeking privacy and extensions that exploit this need for profit, leveraging sensitive information for marketing analytics.
What Users Can Do: Protect Yourself
For concerned users, the best immediate action is to uninstall any extensions linked to Urban VPN. It is crucial to regularly audit browser extensions, particularly when those claiming to enhance privacy come with hidden data collection practices. Organizations also need to implement policies to restrict the installation of unverified extensions on corporate devices, thus safeguarding sensitive information shared through AI platforms.
Conclusion: Vigilance is Key
The Urban VPN Proxy situation underscores an urgent reality in today's digital landscape. As users navigate an increasingly complex web of privacy threats, staying informed and vigilant against potential breaches is essential. The convenience of browser extensions should never come at the cost of personal data security. As we embrace technology’s advances, we must demand greater accountability from developers and platforms that hold our information.
Add Row
Add
Write A Comment