737 Malicious Chrome VPN Extensions Target Russian-Speaking Users to Intercept Traffic

A set of 737 free VPN and proxy extensions for Google Chrome was discovered targeting primarily Russian-speaking users attempting to bypass blocked services. These extensions, distributed via at least 40 developer accounts on the Chrome Web Store, accumulated 75,486 total installs and were designed to intercept browser traffic, routing it through a proxy infrastructure. Of the identified extensions, 274 were found to impersonate 66 legitimate services, though the exact number of impersonated extensions was not fully detailed. No specific dates, CVE IDs, or technical indicators of compromise were provided in the reported findings. The primary impact involves potential unauthorized monitoring or manipulation of users' web traffic.