According to CryptoComLearn, the Chrome Web Store has officially removed the widely-used extension Urban VPN Proxy, which had 6 million users. The removal followed the discovery that the extension was covertly collecting users' conversations with AI platforms.
Data Collection Exposed
Security researchers found that Urban VPN Proxy intercepted and logged user interactions with major AI assistants such as ChatGPT and Claude without authorization. The data was then transmitted to a third-party entity called BiScience for commercial use. The extension had previously been labeled as 'recommended,' further amplifying its trustworthiness and reach.
Implications for Crypto Users
For cryptocurrency investors and traders, such data breaches pose a particularly severe risk. Many users rely on AI tools to manage wallet addresses, trading strategies, and even private key queries. If conversation logs are intercepted, attackers could exploit sensitive information for phishing or targeted fraud. Moreover, VPN-type extensions are often used to anonymize online activity; if the extension itself is malicious, all user traffic is exposed.
Security Experts Urge Immediate Uninstallation
Security expert Idan Dardekhman strongly recommends that all users who have installed Urban VPN Proxy remove it immediately and thoroughly audit other extension permissions in their browsers. He emphasized: "Even recommended, highly rated extensions may not have safe data collection policies. Users must carefully read privacy policies and avoid granting unnecessary permissions."
As of press time, Urban VPN has not issued a public statement regarding the incident. The Chrome Web Store's review process has once again come under scrutiny. Industry voices are calling on Google to strengthen extension review procedures, especially dynamic behavior analysis for privacy-sensitive plugins.
This incident once again highlights the complexity of maintaining digital asset security in the crypto ecosystem. Users need to monitor not only on-chain security but also be wary that everyday browser tools can become sources of data leaks. It is advisable to regularly review installed extensions and use dedicated devices or privacy sandboxes for high-value transactions.