Connect with us

Technology

Malicious Chrome extensions caught stealing sensitive data

Published

on

Malicious Chrome extensions caught stealing sensitive data

NEWYou can now listen to Fox News articles!

Chrome extensions are supposed to make your browser more useful, but they’ve quietly become one of the easiest ways for attackers to spy on what you do online. Security researchers recently uncovered two Chrome extensions that have been doing exactly that for years.

These extensions looked like harmless proxy tools, but behind the scenes, they were hijacking traffic and stealing sensitive data from users who trusted them. What makes this case worse is where these extensions were found. Both were listed on Chrome’s official extension marketplace.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.

FAKE AI CHAT RESULTS ARE SPREADING DANGEROUS MAC MALWARE

Advertisement

Security researchers uncovered malicious Chrome extensions that quietly routed users’ web traffic through attacker-controlled servers to steal sensitive data. (Gokhan Balci/Anadolu Agency/Getty Images)

Malicious Chrome extensions hiding in plain sight

Researchers at Socket discovered two Chrome extensions using the same name, “Phantom Shuttle,” that were posing as tools for proxy routing and network speed testing (via Bleeping Computer). According to the researchers, the extensions have been active since at least 2017.

Both extensions were published under the same developer name and marketed toward foreign trade workers who need to test internet connectivity from different regions. They were sold as subscription-based tools, with prices ranging from roughly $1.40 to $13.60.

At a glance, everything looked normal. The descriptions matched the functionality. The pricing seemed reasonable. The problem was what the extensions were doing after installation.

How Phantom Shuttle steals your data

Socket researchers say Phantom Shuttle routes all your web traffic through proxy servers controlled by the attacker. Those proxies use hardcoded credentials embedded directly into the extension’s code. To avoid detection, the malicious logic is hidden inside what appears to be a legitimate jQuery library.

Advertisement

The attackers didn’t just leave credentials sitting in plain text. The extensions hide them using a custom character-index encoding scheme. Once active, the extension listens to web traffic and intercepts HTTP authentication challenges on any site you visit.

To make sure traffic always flows through their infrastructure, the extensions dynamically reconfigure Chrome’s proxy settings using an auto-configuration script. This forces your browser to route requests exactly where the attacker wants them.

In its default “smarty” mode, Phantom Shuttle routes traffic from more than 170 high-value domains through its proxy network. That list includes developer platforms, cloud service dashboards, social media sites and adult content portals. Local networks and the attacker’s own command-and-control domain are excluded, likely to avoid breaking things or raising suspicion.

While acting as a man-in-the-middle, the extension can capture anything you submit through web forms. That includes usernames, passwords, card details, personal information, session cookies from HTTP headers and API tokens pulled directly from network requests.

CyberGuy contacted Google about the extensions, and a spokesperson confirmed that both have been removed from the Chrome Web Store.

Advertisement

10 SIMPLE CYBERSECURITY RESOLUTIONS FOR A SAFER 2026

Two Chrome extensions posing as proxy tools were found spying on users for years while listed on Google’s official Chrome Web Store. (Yui Mok/PA Images via Getty Images)

How to review the extensions installed in your browser (Chrome)

The step-by-step instructions below apply to Windows PCs, Macs and Chromebooks. In other words, desktop Chrome. Chrome extensions cannot be fully reviewed or removed from the mobile app.

Step 1: Open your extensions list

  • Open Chrome on your computer.
  • Click the three-dot menu in the top-right corner.
  • Select Extensions
  • Then click Manage Extensions.

You can also type this directly into the address bar and press Enter:
chrome://extensions

Step 2: Look for anything you do not recognize

Go through every extension listed and ask yourself:

  • Do I remember installing this?
  • Do I still use it?
  • Do I know what it actually does?

If the answer is no to any of these, take a closer look.

Step 3: Review permissions and access

Click Details on any extension you are unsure about. Pay attention to:

Advertisement
  • Permissions, especially anything that can read or change data on websites you visit
  • Site access, such as extensions that run on all sites
  • Background access, which allows the extension to stay active even when not in use

Proxy tools, VPNs, downloaders and network-related extensions deserve extra scrutiny.

Step 4: Disable suspicious extensions first

If something feels off, toggle the extension off. This immediately stops it from running without deleting it. If everything still works as expected, the extension was likely not essential.

Step 5: Remove extensions you no longer need

To fully remove an extension:

  • Click Remove
  • Confirm when prompted

Unused extensions are a common target for abuse and should be cleaned out regularly.

Step 6: Restart Chrome

Close and reopen Chrome after making changes. This ensures disabled or removed extensions are no longer active.

MICROSOFT TYPOSQUATTING SCAM SWAPS LETTERS TO STEAL LOGINS

Cybersecurity experts warn that trusted browser extensions can become powerful surveillance tools once installed. (Gabby Jones/Bloomberg via Getty Images)

Advertisement

6 steps you can take to stay safe from malicious Chrome extensions

You can’t control what slips through app store reviews, but you can reduce your risk by changing how you install and manage extensions.

1) Install extensions only when absolutely necessary

Every extension increases your attack surface. If you don’t genuinely need it, don’t install it. Convenience extensions often come with far more permissions than they deserve.

2) Check the publisher carefully

Reputable developers usually have a history, a website and multiple well-known extensions. Be cautious with tools from unknown publishers, especially those offering network or proxy features.

3) Read multiple user reviews, not just ratings

Star ratings can be faked or manipulated. Look for detailed reviews that mention long-term use. Watch out for sudden waves of generic praise.

4) Review permissions before clicking install

If an extension asks to “read and change all data on websites you visit,” take that seriously. Proxy tools and network extensions can see everything you do.

Advertisement

5) Use a password manager

A password manager won’t stop a malicious extension from spying on traffic, but it can limit damage. Unique passwords mean stolen credentials can’t unlock multiple accounts. Many managers also refuse to autofill on suspicious pages.

Next, see if your email has been exposed in past breaches. Our #1 password manager (see Cyberguy.com/Passwords) pick includes a built-in breach scanner that checks whether your email address or passwords have appeared in known leaks. If you discover a match, immediately change any reused passwords and secure those accounts with new, unique credentials.

Check out the best expert-reviewed password managers of 2025 at Cyberguy.com.

6) Install strong antivirus software

Strong antivirus software can flag suspicious network activity, proxy abuse and unauthorized changes to browser settings. This adds a layer of defense beyond Chrome’s own protections.

The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.

Advertisement

Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Kurt’s key takeaway

This attack doesn’t rely on phishing emails or fake websites. It works because the extension itself becomes part of your browser. Once installed, it sees nearly everything you do online. Extensions like Phantom Shuttle are dangerous because they blend real functionality with malicious behavior. The extensions deliver the proxy service they promise, which lowers suspicion, while quietly routing user data through attacker-controlled servers.

When was the last time you reviewed the extensions installed in your browser? Let us know by writing to us at Cyberguy.com.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.

Advertisement

Copyright 2025 CyberGuy.com. All rights reserved.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Technology

Nothing cancels this year’s CMF phone due to RAM prices

Published

on

Nothing cancels this year’s CMF phone due to RAM prices

Nothing’s next budget phone is the latest victim of RAMageddon. As 9to5Google reports, Nothing co-founder Akis Evangelidis announced in a post on X that a follow-up to the CMF Phone 2 Pro won’t be coming this year:

We were working on a successor but with memory prices where they are right now, we can’t build a phone that feels like a genuine step forward at a price that makes sense for CMF. As a result, we’ve decided not to launch a new CMF phone this year.

Last week, Nothing CEO and co-founder Carl Pei also said the RAM shortage has impacted the cost of the company’s mid-range phone, stating, “For Phone 4A, memory costs doubled between when we decided to build the device and when it launched. They’ve doubled again since.” According to Pei, “memory is now the most expensive component in a smartphone.” Nothing is far from the only company facing RAM pricing challenges — earlier this week, Tim Cook announced Apple will be raising prices, saying “the situation has become unsustainable.”

While there won’t be a new CMF phone this year, Evangelidis added in his post that CMF still has “several new products launching as well as some entirely new categories.” He also hinted that “the smartphone launch season at Nothing isn’t over yet.”

Continue Reading

Technology

China’s brain chip breakthrough raises big questions

Published

on

China’s brain chip breakthrough raises big questions

NEWYou can now listen to Fox News articles!

A coin-sized brain chip in China could help people with paralysis control devices using their thoughts. China has approved a brain-computer interface called NEO for commercial medical use in certain patients with paralysis caused by spinal cord injuries. That moves brain-chip technology out of research trials and closer to real-world medical care.

Advertisement

Developed by researchers at Tsinghua University and Shanghai-based Neuracle Technology, NEO sits under the skull but rests on the brain’s protective outer layer rather than piercing deep into brain tissue. That design could make it less invasive than some competing implants.

For patients who have lost movement, this kind of technology could be life-changing. It could help restore a level of independence that once felt out of reach. But here’s where we need to slow down a bit. If a brain chip can turn your brain signals into digital commands, we need to ask who controls that data and how well it is protected.

Sign up for my FREE CyberGuy Report

  • Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
  • For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com trusted by millions who watch CyberGuy on TV daily.
  • Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.

BRAIN IMPLANT ENABLES ALS PATIENT TO COMMUNICATE USING AI

China’s NEO brain implant could help some paralysis patients control devices, like prosthetic hands, with their thoughts while raising concerns over brain data privacy. (Tsinghua University)

What is China’s NEO brain chip?

NEO is a brain-computer interface, often called a BCI. These systems read brain activity and translate it into commands for an external device. In this case, the implant uses sensors placed near the brain’s motor-control area. Those signals can help a patient operate equipment such as a robotic glove or computer interface.

Advertisement

What makes NEO especially notable is its placement. Brain-computer interfaces can be designed in different ways, and some go deeper into the brain than others. The company most people know in this space is Neuralink, the brain-chip startup co-founded by Elon Musk. Its implant uses tiny threads that enter the brain’s cortex. NEO takes a less invasive approach by placing electrodes on the dura mater, which is the protective membrane around the brain.

That design matters because every brain implant carries medical risk. Surgery can cause bleeding, swelling, infection or tissue damage. Even a small complication in the wrong part of the brain can affect speech or movement.

China’s approval does not mean brain chips are suddenly available for anyone who wants one. This remains a medical device for a narrow group of patients. Right now, the focus centers on helping people with severe paralysis regain some digital or assisted movement control.

Why China’s brain chip breakthrough matters

The medical upside here is hard to deny. More than three billion people worldwide live with neurological conditions, according to the World Health Organization. That includes people dealing with stroke, epilepsy, Parkinson’s disease, spinal cord injuries and other serious conditions.

For someone who has spent years unable to move freely or communicate easily, even a small amount of restored control could feel enormous. That is why brain-computer interfaces are getting so much attention. They could give some patients a new way to interact with the world around them.

Advertisement

Neuralink has already shown what that can look like in real life. Audrey Crews, a Neuralink trial participant who has been paralyzed for years, publicly shared that she wrote her name using the implant by controlling her computer.

ELON MUSK SHARES PLAN TO MASS-PRODUCE BRAIN IMPLANTS FOR PARALYSIS, NEUROLOGICAL DISEASE

How China’s brain chip compares with Neuralink

Elon Musk’s Neuralink has attracted most of the public attention in the U.S. brain-chip race. Musk has talked openly about restoring movement, helping people communicate and one day addressing vision loss.

Neuralink received approval to begin human trials, and more than 20 people have reportedly received its implant through testing. However, it has not received broad FDA approval for general commercial use.

China’s NEO approval puts a different kind of pressure on the field. It shows that China wants to move brain-computer interface technology into its health system and build a major industry around it.

Advertisement

This also fits a larger pattern. China has made BCI development part of its strategic technology push. The country wants breakthroughs by 2027 and a globally competitive brain-computer interface industry by 2030.

The coin-sized NEO brain chip rests on the brain’s protective outer layer, making it less invasive than implants that pierce brain tissue. (Tsinghua University)

Why brain chip privacy is such a big concern

We already worry about phones listening, apps tracking location and smart TVs collecting viewing habits. Brain-computer interfaces take that concern to another level.

A BCI collects signals from the nervous system. Today, that may mean decoding movement intent, such as whether a patient wants to move a cursor left or right. But as the technology improves, the data could become more sensitive.

That raises some big questions. Who owns the brain data? Can it be sold, shared or used to train AI systems? Could an insurer, employer or government ever demand access? What happens if a company changes its privacy policy after the implant becomes part of someone’s daily life?

Advertisement

Those questions sound dramatic until you remember how many connected devices began as conveniences and turned into data pipelines.

A brain chip designed for medical help should not become another ad platform, another surveillance tool or another database waiting to be breached.

YOUR HEALTH DATA IS BEING SOLD WITHOUT YOUR CONSENT

Could hackers target brain-computer interfaces?

This is where the whole brain-chip conversation gets very serious. Any device that connects to a computer raises security questions. A brain-computer interface raises even bigger ones because it deals with signals from your body and, in some cases, the devices that help you move or communicate.

The concern here is someone getting access to neural data, device settings or the commands moving between the implant and outside equipment. Think about that for a second. If a brain chip helps someone control a robotic hand, a wheelchair or a communication device, a security failure could affect far more than privacy. It could affect that person’s independence and safety. That to me is scary.

Advertisement

Companies building these devices need to treat cybersecurity like part of the surgery, not some software update they figure out later. Encryption, strict access controls, medical-grade testing and clear update policies should be baked in from day one.

And because a brain implant may stay inside a person’s body for years, long-term support has to be part of the deal. No one should end up with an outdated implant in their head because a company moved on to the next big product launch.

What China’s brain chip means to you

For now, this technology is geared toward patients with serious medical needs. So, no, most of us are not lining up for a brain chip anytime soon. But this should still get your attention.

We already give up a lot of personal data through our phones, watches, cars and smart home devices. A brain implant takes that to a whole different level because the data comes from inside the body. That is about as personal as it gets.

Before this technology moves beyond hospitals and medical trials, patients need plain answers before they agree to anything. They should know who can access the data, how long it gets stored, whether it can be shared and whether it can help train AI systems.

Advertisement

The medical potential here is incredible. Helping someone regain control or communicate again could change a life. But the privacy protections need to be just as strong as the technology itself.

NEURALINK BRAIN IMPLANT HELPS ARIZONA MAN REGAIN CONTROL OF HIS LIFE

Brain-computer interfaces, like Neuralink, pictured here, could restore independence for some patients, but experts say neural data needs strong privacy and cybersecurity protections. (Neuralink)

Watch the CyberGuy Live replay: Lock Down Your Phone in 30 Minutes

Your phone holds your email, passwords, photos, banking apps and personal data. In this free CyberGuy Live replay, Kurt the CyberGuy walks you step by step through simple phone security fixes you can do at your own pace. You’ll learn how to improve your privacy settings, spot the latest phone scams, use trusted security tools and walk away with a simple checklist to stay protected. Watch the replay and get our checklist here: CyberGuyLive.com

Kurt’s key takeaways

China’s NEO brain chip could be a huge step forward for people living with paralysis. If this technology helps someone regain control or communicate again, that is powerful. But I also think we need to be very careful here. Once a device connects your brain signals to outside technology, the privacy stakes change fast. We are talking about data tied to your nervous system. That to me is the line we need to watch closely. Brain chips could do incredible good. But companies and governments need clear limits before this technology moves any further into everyday life. The promise is real. So are the risks. And when the data comes from inside your own head, “trust us” will never be enough.

Advertisement

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Would you ever consider a brain implant if it could restore movement or communication, or does the privacy risk feel too personal to accept? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Report

  • Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
  • For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com trusted by millions who watch CyberGuy on TV daily.
  • Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.

Copyright 2026 CyberGuy.com. All rights reserved.

Continue Reading

Technology

NASA selects Eric Schmidt’s rocket company for a 2028 mission to Mars

Published

on

NASA selects Eric Schmidt’s rocket company for a 2028 mission to Mars

Relativity Space, the rocket company led by former Google executive Eric Schmidt, was picked to launch NASA’s Aeolus payload to Mars in 2028, as reported earlier by TechCrunch. Under a new public-private partnership, Relativity Space will provide the “spacecraft, rocket, and cruise operations” to fly Aeolus to Mars, where the payload will “provide the first integrated, daily, global view of Martian winds, temperatures, dust, and clouds.”

The Aeolus payload will have four instruments on board for studying the Martian atmosphere, which NASA says will “directly inform entry, descent, and landing systems and support safer, more predictable mission planning for astronauts.”

Schmidt, who served as CEO of Google from 2001 to 2011, became Relativity Space’s CEO in 2025, a couple of years after it launched the “world’s first 3D-printed rocket,” Terran 1, which failed shortly after launch. Relativity Space’s larger Terran R rocket isn’t scheduled to have its first launch until later this year.

Continue Reading
Advertisement

Trending