Tuesday, August 11, 2026
LIVEThe Unrelenting Cyber Battle: Hacking Threats and the Imperative of Robust Data Protection///Navigating the Cyber Labyrinth: Bolstering Defenses Against Evolving Hacking Threats///The Dual Front War: Battling Hacking and Bolstering Data Protection in the Digital Age///The Ever-Evolving Cyber Threat Landscape: Navigating Hacking and Fortifying Data Protection///The Unseen Battle: Fortifying Data in an Age of Relentless Hacking///The Unseen War: Hacking's Relentless Advance and the Imperative of Data Protection///The Evolving Threat Landscape: Hacking, Data Protection, and the Imperative for Proactive Security///Navigating the Digital Minefield: Bolstering Data Protection in an Era of Relentless Hacking///The Dual Fronts of Digital Defense: Combating Hacking and Fortifying Data Protection///Hacking's New Frontier: Fortifying Data Protection in the Age of Advanced Cyber Threats///The Dual Front: Navigating Hacking Threats and Fortifying Data Protection in the Digital Age///Navigating the Digital Gauntlet: The Evolving Nexus of Hacking and Data Protection///The Unrelenting Cyber Battle: Hacking Threats and the Imperative of Robust Data Protection///Navigating the Cyber Labyrinth: Bolstering Defenses Against Evolving Hacking Threats///The Dual Front War: Battling Hacking and Bolstering Data Protection in the Digital Age///The Ever-Evolving Cyber Threat Landscape: Navigating Hacking and Fortifying Data Protection///The Unseen Battle: Fortifying Data in an Age of Relentless Hacking///The Unseen War: Hacking's Relentless Advance and the Imperative of Data Protection///The Evolving Threat Landscape: Hacking, Data Protection, and the Imperative for Proactive Security///Navigating the Digital Minefield: Bolstering Data Protection in an Era of Relentless Hacking///The Dual Fronts of Digital Defense: Combating Hacking and Fortifying Data Protection///Hacking's New Frontier: Fortifying Data Protection in the Age of Advanced Cyber Threats///The Dual Front: Navigating Hacking Threats and Fortifying Data Protection in the Digital Age///Navigating the Digital Gauntlet: The Evolving Nexus of Hacking and Data Protection///
Subscribe
Cyber Security
Independent · Digital
Thehackingpost
RSSSubscribe
CybersecurityAI-assisted

Chrome Extension with 6M+ Users Found Collecting AI Chatbot Inputs

## Cybersecurity: Urban VPN Proxy Data Collection Concerns

MBy Michael ReevesDec 16, 20252 min read

Cybersecurity: Urban VPN Proxy Data Collection Concerns

Recent findings have revealed that the Urban VPN Proxy, a browser extension with over six million installations, has been secretly capturing user conversations across multiple AI chatbot platforms, including ChatGPT, Claude, Gemini, and Microsoft Copilot. This discovery raises significant concerns regarding privacy and data security in the context of generative AI.

Research conducted using the Wings agentic-AI risk engine identified that Urban VPN Proxy, particularly its version 5.5.0 released on Tue, Jul 9, 2025, contains hidden code. This code intercepts, captures, and exfiltrates AI chat traffic. The extension operates these processes even when the VPN function is disabled. Scripts such as chatgpt.js and claude.js are deployed to override browser network functions and intercept data in real-time.

The data collected includes full conversations, conversation IDs, timestamps, and information about the AI model used. This information is compressed and sent to remote servers, including analytics.urban-vpn.com and stats.urban-vpn.com.

Urban VPN advertises “AI protection” as a feature, claiming to scan prompts for sensitive data or dangerous links. However, the code examination revealed that this feature does not prevent data collection, thus misleading users. The harvesting code is also present in seven other extensions from the same developer, affecting approximately 8 million users.

This discovery raises significant concerns regarding privacy and data security in the context of generative AI.
Michael Reeves · Thehackingpost

Urban VPN is operated by Urban Cyber Security Inc., linked to BiScience Ltd., an Israeli data broker. Their privacy policy admits to collecting AI prompts and outputs for marketing analytics, contradicting their public claims of not selling data to third parties.

The situation raises questions about the review process for browser extensions, as Urban VPN retains its "Featured" status despite breaches of Chrome’s Limited Use policy, which prohibits sharing user data with data brokers. Users who interacted with AI chatbots via Urban VPN after July 2025 should assume their private conversations have been compromised.

Advertisement

Currently, the extension is still available on Chrome and Edge stores, with no option for users to disable the data collection feature except by removing the extension entirely.

Based on reporting by GBHackers.

AI transparency. This article was produced with the assistance of artificial intelligence and published under human editorial oversight. AI systems can make mistakes. Read how we use AI (EU AI Act, Art. 50).
Related Stories
Cybersecurity

Why Fintech Banking Platforms Are Reducing Operational Costs by 40%

Paige Monroe · Mar 26, 2026
Cybersecurity

Dogecoin Price Prediction: SHIB Burns 172M Tokens as Pepeto Exchange Earns From Every Trade

Eric Wallace · Mar 26, 2026
Cybersecurity

Solana Price Prediction: SOL Holds $86 With Commodity Status as Pepeto Targets Bigger Returns

Zachary Burns · Mar 26, 2026
Cybersecurity

Open Directory Malware Campaign Uses Obfuscated VBS, PNG Loaders and RAT Payloads

Joseph Cain · Mar 26, 2026