FreeVPN.One Chrome Extension Captures Screenshots, Raises Pr

## Chrome Extension FreeVPN.One Discovered Secretly Capturing User Screenshots

A popular Chrome extension, **FreeVPN.One**, has been found to be surreptitiously capturing users’ full-page screenshots and collecting data, according to researchers at cybersecurity firm **Koi Security**. Despite maintaining a verified status and positive reviews within the **Chrome Web Store**, the extension’s behavior raises significant privacy concerns. The discovery underscores ongoing challenges in ensuring the security of browser extensions.

## Data Collection and Questionable Justification

Koi Security’s investigation revealed that FreeVPN.One silently captures screenshots using a content script and background service worker, even before any user interaction. The extension’s privacy policy mentions AI threat detection but fails to disclose the automatic screenshot capture. The developer has stated that the screenshots are part of a “security scan,” but Koi Security’s researchers found screenshots of common, benign applications. They have not provided evidence of AI analysis being performed. The extension also requests a broader set of permissions compared to typical VPN extensions.

## Response and User Action

A recent update to version 3.1.4 introduced encryption, complicating analysis of the collected data. Users are advised to immediately remove the FreeVPN.One extension from their Chrome browsers by navigating to the extensions menu, clicking the vertical dots next to the extension, and selecting “Remove From Chrome.” Given the potential exposure of sensitive information, users should also consider changing passwords for any accounts accessed while using the extension.

## Ongoing Concerns Regarding Chrome Web Store Verification

Despite the identified privacy violations, FreeVPN.One remains available on the Chrome Web Store and retains its verified status. This situation highlights the need for increased vigilance when installing browser extensions and a continuing examination of the Chrome Web Store’s verification processes.

Source: https://www.xda-developers.com/delete-free-vpn-one-extension/