Browser extensions with eight million users copy every AI chat
In shortVPN and 'privacy' extensions quietly captured conversations with ChatGPT, Claude, Gemini and other AI sites.
What happened
Koi Security reported eight extensions with more than eight million users between them that captured users' AI conversations. The largest, Urban VPN Proxy, had over six million Chrome users and a Featured badge.
The collection arrived in an automatic update in July 2025, was on by default, and kept running with the VPN switched off. Injected scripts overrode the page's network functions on AI sites to read prompts and answers.
Why it worked
An extension works inside the page, after encryption is removed, so a proxy or DLP tool on the network sees nothing unusual. An extension can be trusted at install and change later.
What EndLayer shows or does
- Available now
Browser policy: whether the policy that limits extensions is in force on each device. Verified, never modified. Roadmap →
- Available now
The EndLayer browser extension checks what a person types into an AI site's composer before it is sent, so sensitive data can be redacted or held. It does not stop another extension from reading the page. Roadmap →
- Not covered
Spotting a malicious third-party extension.