ThreatCluster

Urban VPN Extension Harvests AI Chat Data from Millions of Users

First seen 16 Dec 2025, 15:57 UTC CsoonlineRedditInfosecurity-MagazineTheregister 82% similarity 37

Article Content

Browse articles
ThreatCluster

Urban VPN Proxy, a popular free browser extension, has been found to collect and export full AI chat conversations from users. The extension injects hidden scripts into AI chat services, capturing prompts, responses, and metadata, which are sent to Urban VPN’s servers regardless of the VPN's status. This breach affects users who utilize AI tools for sensitive information, posing risks to organizational data security.

ThreatCluster AI

Community

Browse all →