{"id":2971,"date":"2025-08-21T01:00:43","date_gmt":"2025-08-21T01:00:43","guid":{"rendered":"https:\/\/serverhost.com\/blog\/warning-free-vpn-extension-caught-taking-screenshots-and-uploading-data\/"},"modified":"2025-08-21T01:00:43","modified_gmt":"2025-08-21T01:00:43","slug":"warning-free-vpn-extension-caught-taking-screenshots-and-uploading-data","status":"publish","type":"post","link":"https:\/\/serverhost.com\/blog\/warning-free-vpn-extension-caught-taking-screenshots-and-uploading-data\/","title":{"rendered":"Warning: Free VPN Extension Caught Taking Screenshots and Uploading Data"},"content":{"rendered":"<p>If you are a user of Google Chrome or any Chromium-based browser and have installed a free VPN extension from the Chrome Web Store, it&#8217;s vital to verify its legitimacy. This caution is especially crucial for users in the UK, where VPN usage has surged recently due to the implementation of online age verification systems.<\/p>\n<p>Not all VPN services are created equally\u2014some are fundamentally exploitative. A free VPN extension reviewed by Koi Security, initially appearing trustworthy, was discovered to be spying on users extensively instead of providing protection. Researchers noted the extension&#8217;s real purpose was to monitor activities rather than secure users\u2019 privacy.<\/p>\n<p>The extension began as a basic VPN but underwent significant changes in 2025, progressively gaining increased permissions under the guise of enhancing user security:<\/p>\n<ul>\n<li>In April, it requested permission for <code>&lt;all_urls&gt;<\/code>, allowing access to every website visited.<\/li>\n<li>By June, it gained scripting permissions.<\/li>\n<li>In July, it began capturing screenshots and collecting location and device information, ultimately encrypting this data to avoid detection.<\/li>\n<\/ul>\n<p>After a webpage loads, content scripts activate after a brief delay, capturing screenshots using Chrome&#8217;s privileged API. This surveillance could compromise sensitive information, including financial data, personal communications, and more\u2014without the users\u2019 informed consent.<\/p>\n<p>The extension cleverly marketed a component called &quot;AI Threat Detector&quot; that claimed to analyze websites for potential phishing threats. This feature, however, masked the continuous monitoring that users were unknowingly subjected to. Many users trust these tools thinking they are engaging with a one-time security check, rather than persistent oversight of their online activities.<\/p>\n<p>Despite these alarming revelations, the extension has over 100,000 installs and continues to be available on the Chrome Web Store, still featuring Google&#8217;s promotional badge. Less tech-savvy users may overlook the risks, underlining a troubling reality: if a product is free, the users are often the product.<\/p>\n<p>For further insights, you can read the full <a target=\"_blank\" rel=\"nofollow\" href=\"https:\/\/koi-security.webflow.io\/blog\/spyvpn-the-vpn-that-secretly-captures-your-screen\">Koi Security blog post<\/a> detailing how these events unfolded and why Google&#8217;s oversight failed to detect these activities.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>If you are a user of Google Chrome or any Chromium-based browser and have installed a free VPN extension from the Chrome Web Store, it&#8217;s vital to verify its legitimacy. This caution is especially crucial for users in the UK, where VPN usage has surged recently due to the implementation of online age verification systems. [&hellip;]<\/p>\n","protected":false},"author":0,"featured_media":2972,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4,867,249,989],"tags":[],"class_list":["post-2971","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","category-privacy","category-security","category-vpn"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v24.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Warning: Free VPN Extension Caught Taking Screenshots and Uploading Data - ServerHost Hosting Solutions Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/serverhost.com\/blog\/warning-free-vpn-extension-caught-taking-screenshots-and-uploading-data\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Warning: Free VPN Extension Caught Taking Screenshots and Uploading Data - ServerHost Hosting Solutions Blog\" \/>\n<meta property=\"og:description\" content=\"If you are a user of Google Chrome or any Chromium-based browser and have installed a free VPN extension from the Chrome Web Store, it&#8217;s vital to verify its legitimacy. This caution is especially crucial for users in the UK, where VPN usage has surged recently due to the implementation of online age verification systems. [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/serverhost.com\/blog\/warning-free-vpn-extension-caught-taking-screenshots-and-uploading-data\/\" \/>\n<meta property=\"og:site_name\" content=\"ServerHost Hosting Solutions Blog\" \/>\n<meta property=\"article:published_time\" content=\"2025-08-21T01:00:43+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/serverhost.com\/blog\/warning-free-vpn-extension-caught-taking-screenshots-and-uploading-data\/\",\"url\":\"https:\/\/serverhost.com\/blog\/warning-free-vpn-extension-caught-taking-screenshots-and-uploading-data\/\",\"name\":\"Warning: Free VPN Extension Caught Taking Screenshots and Uploading Data - ServerHost Hosting Solutions Blog\",\"isPartOf\":{\"@id\":\"https:\/\/serverhost.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/serverhost.com\/blog\/warning-free-vpn-extension-caught-taking-screenshots-and-uploading-data\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/serverhost.com\/blog\/warning-free-vpn-extension-caught-taking-screenshots-and-uploading-data\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/serverhost.com\/blog\/wp-content\/uploads\/2025\/08\/4b5f09a3-28bc-47a4-bed2-1876f86830b4.webp\",\"datePublished\":\"2025-08-21T01:00:43+00:00\",\"author\":{\"@id\":\"\"},\"breadcrumb\":{\"@id\":\"https:\/\/serverhost.com\/blog\/warning-free-vpn-extension-caught-taking-screenshots-and-uploading-data\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/serverhost.com\/blog\/warning-free-vpn-extension-caught-taking-screenshots-and-uploading-data\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/serverhost.com\/blog\/warning-free-vpn-extension-caught-taking-screenshots-and-uploading-data\/#primaryimage\",\"url\":\"https:\/\/serverhost.com\/blog\/wp-content\/uploads\/2025\/08\/4b5f09a3-28bc-47a4-bed2-1876f86830b4.webp\",\"contentUrl\":\"https:\/\/serverhost.com\/blog\/wp-content\/uploads\/2025\/08\/4b5f09a3-28bc-47a4-bed2-1876f86830b4.webp\",\"width\":1920,\"height\":1008},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/serverhost.com\/blog\/warning-free-vpn-extension-caught-taking-screenshots-and-uploading-data\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/serverhost.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Warning: Free VPN Extension Caught Taking Screenshots and Uploading Data\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/serverhost.com\/blog\/#website\",\"url\":\"https:\/\/serverhost.com\/blog\/\",\"name\":\"ServerHost Hosting Solutions Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/serverhost.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Warning: Free VPN Extension Caught Taking Screenshots and Uploading Data - ServerHost Hosting Solutions Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/serverhost.com\/blog\/warning-free-vpn-extension-caught-taking-screenshots-and-uploading-data\/","og_locale":"en_US","og_type":"article","og_title":"Warning: Free VPN Extension Caught Taking Screenshots and Uploading Data - ServerHost Hosting Solutions Blog","og_description":"If you are a user of Google Chrome or any Chromium-based browser and have installed a free VPN extension from the Chrome Web Store, it&#8217;s vital to verify its legitimacy. This caution is especially crucial for users in the UK, where VPN usage has surged recently due to the implementation of online age verification systems. [&hellip;]","og_url":"https:\/\/serverhost.com\/blog\/warning-free-vpn-extension-caught-taking-screenshots-and-uploading-data\/","og_site_name":"ServerHost Hosting Solutions Blog","article_published_time":"2025-08-21T01:00:43+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/serverhost.com\/blog\/warning-free-vpn-extension-caught-taking-screenshots-and-uploading-data\/","url":"https:\/\/serverhost.com\/blog\/warning-free-vpn-extension-caught-taking-screenshots-and-uploading-data\/","name":"Warning: Free VPN Extension Caught Taking Screenshots and Uploading Data - ServerHost Hosting Solutions Blog","isPartOf":{"@id":"https:\/\/serverhost.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/serverhost.com\/blog\/warning-free-vpn-extension-caught-taking-screenshots-and-uploading-data\/#primaryimage"},"image":{"@id":"https:\/\/serverhost.com\/blog\/warning-free-vpn-extension-caught-taking-screenshots-and-uploading-data\/#primaryimage"},"thumbnailUrl":"https:\/\/serverhost.com\/blog\/wp-content\/uploads\/2025\/08\/4b5f09a3-28bc-47a4-bed2-1876f86830b4.webp","datePublished":"2025-08-21T01:00:43+00:00","author":{"@id":""},"breadcrumb":{"@id":"https:\/\/serverhost.com\/blog\/warning-free-vpn-extension-caught-taking-screenshots-and-uploading-data\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/serverhost.com\/blog\/warning-free-vpn-extension-caught-taking-screenshots-and-uploading-data\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/serverhost.com\/blog\/warning-free-vpn-extension-caught-taking-screenshots-and-uploading-data\/#primaryimage","url":"https:\/\/serverhost.com\/blog\/wp-content\/uploads\/2025\/08\/4b5f09a3-28bc-47a4-bed2-1876f86830b4.webp","contentUrl":"https:\/\/serverhost.com\/blog\/wp-content\/uploads\/2025\/08\/4b5f09a3-28bc-47a4-bed2-1876f86830b4.webp","width":1920,"height":1008},{"@type":"BreadcrumbList","@id":"https:\/\/serverhost.com\/blog\/warning-free-vpn-extension-caught-taking-screenshots-and-uploading-data\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/serverhost.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Warning: Free VPN Extension Caught Taking Screenshots and Uploading Data"}]},{"@type":"WebSite","@id":"https:\/\/serverhost.com\/blog\/#website","url":"https:\/\/serverhost.com\/blog\/","name":"ServerHost Hosting Solutions Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/serverhost.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/serverhost.com\/blog\/wp-json\/wp\/v2\/posts\/2971","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/serverhost.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/serverhost.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/serverhost.com\/blog\/wp-json\/wp\/v2\/comments?post=2971"}],"version-history":[{"count":0,"href":"https:\/\/serverhost.com\/blog\/wp-json\/wp\/v2\/posts\/2971\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/serverhost.com\/blog\/wp-json\/wp\/v2\/media\/2972"}],"wp:attachment":[{"href":"https:\/\/serverhost.com\/blog\/wp-json\/wp\/v2\/media?parent=2971"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/serverhost.com\/blog\/wp-json\/wp\/v2\/categories?post=2971"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/serverhost.com\/blog\/wp-json\/wp\/v2\/tags?post=2971"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}