TGTGInsighttelegram intelligenceLIVE / telegram public index
TGINSIGHT POST
Post #8112
@thehackernews
The Hacker News
Post content
Post content
🛑 Two Chrome extensions were caught intercepting browser traffic and stealing credentials from 170+ sites. They pose as VPN tools, charge subscriptions, then silently proxy traffic and exfiltrate credentials in plaintext. One has been active since 2017, the other since 2023. 🔗 Details → https://thehackernews.com/2025/12/two-chrome-extensions-caught-secretly.html