Technology
Malicious Chrome extensions caught stealing sensitive data
NEWYou can now listen to Fox News articles!
Chrome extensions are supposed to make your browser more useful, but they’ve quietly become one of the easiest ways for attackers to spy on what you do online. Security researchers recently uncovered two Chrome extensions that have been doing exactly that for years.
These extensions looked like harmless proxy tools, but behind the scenes, they were hijacking traffic and stealing sensitive data from users who trusted them. What makes this case worse is where these extensions were found. Both were listed on Chrome’s official extension marketplace.
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.
FAKE AI CHAT RESULTS ARE SPREADING DANGEROUS MAC MALWARE
Security researchers uncovered malicious Chrome extensions that quietly routed users’ web traffic through attacker-controlled servers to steal sensitive data. (Gokhan Balci/Anadolu Agency/Getty Images)
Malicious Chrome extensions hiding in plain sight
Researchers at Socket discovered two Chrome extensions using the same name, “Phantom Shuttle,” that were posing as tools for proxy routing and network speed testing (via Bleeping Computer). According to the researchers, the extensions have been active since at least 2017.
Both extensions were published under the same developer name and marketed toward foreign trade workers who need to test internet connectivity from different regions. They were sold as subscription-based tools, with prices ranging from roughly $1.40 to $13.60.
At a glance, everything looked normal. The descriptions matched the functionality. The pricing seemed reasonable. The problem was what the extensions were doing after installation.
How Phantom Shuttle steals your data
Socket researchers say Phantom Shuttle routes all your web traffic through proxy servers controlled by the attacker. Those proxies use hardcoded credentials embedded directly into the extension’s code. To avoid detection, the malicious logic is hidden inside what appears to be a legitimate jQuery library.
The attackers didn’t just leave credentials sitting in plain text. The extensions hide them using a custom character-index encoding scheme. Once active, the extension listens to web traffic and intercepts HTTP authentication challenges on any site you visit.
To make sure traffic always flows through their infrastructure, the extensions dynamically reconfigure Chrome’s proxy settings using an auto-configuration script. This forces your browser to route requests exactly where the attacker wants them.
In its default “smarty” mode, Phantom Shuttle routes traffic from more than 170 high-value domains through its proxy network. That list includes developer platforms, cloud service dashboards, social media sites and adult content portals. Local networks and the attacker’s own command-and-control domain are excluded, likely to avoid breaking things or raising suspicion.
While acting as a man-in-the-middle, the extension can capture anything you submit through web forms. That includes usernames, passwords, card details, personal information, session cookies from HTTP headers and API tokens pulled directly from network requests.
CyberGuy contacted Google about the extensions, and a spokesperson confirmed that both have been removed from the Chrome Web Store.
10 SIMPLE CYBERSECURITY RESOLUTIONS FOR A SAFER 2026
Two Chrome extensions posing as proxy tools were found spying on users for years while listed on Google’s official Chrome Web Store. (Yui Mok/PA Images via Getty Images)
How to review the extensions installed in your browser (Chrome)
The step-by-step instructions below apply to Windows PCs, Macs and Chromebooks. In other words, desktop Chrome. Chrome extensions cannot be fully reviewed or removed from the mobile app.
Step 1: Open your extensions list
- Open Chrome on your computer.
- Click the three-dot menu in the top-right corner.
- Select Extensions
- Then click Manage Extensions.
You can also type this directly into the address bar and press Enter:
chrome://extensions
Step 2: Look for anything you do not recognize
Go through every extension listed and ask yourself:
- Do I remember installing this?
- Do I still use it?
- Do I know what it actually does?
If the answer is no to any of these, take a closer look.
Step 3: Review permissions and access
Click Details on any extension you are unsure about. Pay attention to:
- Permissions, especially anything that can read or change data on websites you visit
- Site access, such as extensions that run on all sites
- Background access, which allows the extension to stay active even when not in use
Proxy tools, VPNs, downloaders and network-related extensions deserve extra scrutiny.
Step 4: Disable suspicious extensions first
If something feels off, toggle the extension off. This immediately stops it from running without deleting it. If everything still works as expected, the extension was likely not essential.
Step 5: Remove extensions you no longer need
To fully remove an extension:
- Click Remove
- Confirm when prompted
Unused extensions are a common target for abuse and should be cleaned out regularly.
Step 6: Restart Chrome
Close and reopen Chrome after making changes. This ensures disabled or removed extensions are no longer active.
MICROSOFT TYPOSQUATTING SCAM SWAPS LETTERS TO STEAL LOGINS
Cybersecurity experts warn that trusted browser extensions can become powerful surveillance tools once installed. (Gabby Jones/Bloomberg via Getty Images)
6 steps you can take to stay safe from malicious Chrome extensions
You can’t control what slips through app store reviews, but you can reduce your risk by changing how you install and manage extensions.
1) Install extensions only when absolutely necessary
Every extension increases your attack surface. If you don’t genuinely need it, don’t install it. Convenience extensions often come with far more permissions than they deserve.
2) Check the publisher carefully
Reputable developers usually have a history, a website and multiple well-known extensions. Be cautious with tools from unknown publishers, especially those offering network or proxy features.
3) Read multiple user reviews, not just ratings
Star ratings can be faked or manipulated. Look for detailed reviews that mention long-term use. Watch out for sudden waves of generic praise.
4) Review permissions before clicking install
If an extension asks to “read and change all data on websites you visit,” take that seriously. Proxy tools and network extensions can see everything you do.
5) Use a password manager
A password manager won’t stop a malicious extension from spying on traffic, but it can limit damage. Unique passwords mean stolen credentials can’t unlock multiple accounts. Many managers also refuse to autofill on suspicious pages.
Next, see if your email has been exposed in past breaches. Our #1 password manager (see Cyberguy.com/Passwords) pick includes a built-in breach scanner that checks whether your email address or passwords have appeared in known leaks. If you discover a match, immediately change any reused passwords and secure those accounts with new, unique credentials.
Check out the best expert-reviewed password managers of 2025 at Cyberguy.com.
6) Install strong antivirus software
Strong antivirus software can flag suspicious network activity, proxy abuse and unauthorized changes to browser settings. This adds a layer of defense beyond Chrome’s own protections.
The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.
Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Kurt’s key takeaway
This attack doesn’t rely on phishing emails or fake websites. It works because the extension itself becomes part of your browser. Once installed, it sees nearly everything you do online. Extensions like Phantom Shuttle are dangerous because they blend real functionality with malicious behavior. The extensions deliver the proxy service they promise, which lowers suspicion, while quietly routing user data through attacker-controlled servers.
When was the last time you reviewed the extensions installed in your browser? Let us know by writing to us at Cyberguy.com.
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.
Copyright 2025 CyberGuy.com. All rights reserved.
The Kane Parsons’ film Backrooms is expected to earn up to $90 million in its opening weekend after pulling down $38 million on Friday alone. That’s not only above expectations, but absolutely obliterates A24’s previous opening weekend record of $25.5 million for Alex Garland’s Civil War. It’s also a better opening day than The Mandalorian and Grogu, which only pulled down $33.7 million on its way to a total $81.6 million for the weekend.
That also means that Backrooms is an incredibly profitable movie, with an estimated $10 million budget. By comparison, the latest Star Wars disappointment cost $165 million and was considered affordable compared to other entries in the series.
While Backrooms hasn’t received quite as much universal praise as fellow low-budget horror breakout Obsession, it’s still largely getting positive reviews. It also adds to the growing number of YouTube creators (including Obsession’s Curry Barker) who have proven to be successful box office draws.
NEWYou can now listen to Fox News articles!
A freight truck with no driver, no cab and no one sitting behind the wheel is starting to sound more familiar. In fact, this summer, that is exactly what is happening on local roads in Marysville, Ohio.
EASE Logistics, an Ohio-based logistics company, is partnering with autonomous truck technology company Einride to deploy two cab-less electric trucks between EASE warehouse locations. The two companies recently announced the proof-of-concept service.
The trucks will operate on EASE property and local public roads. They will move goods between warehouse locations while the companies collect data on warehousing, distribution and transportation operations.
The project is part of the Ohio Department of Transportation’s DriveOhio Truck Automation Corridor Project, in partnership with the Indiana Department of Transportation. The goal is to study how autonomous trucking affects operations, safety and freight efficiency.
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
AI TRUCK SYSTEM MATCHES TOP HUMAN DRIVERS IN MASSIVE SAFETY SHOWDOWN WITH PERFECT SCORES
Autonomous cab-less electric trucks are beginning real-world freight testing this summer on local roads in Marysville, Ohio, as EASE Logistics and Einride launch a new pilot program. (Kurt “CyberGuy” Knutsson)
What are cab-less electric trucks?
These are not regular trucks with a driver waiting to take over. Einride’s vehicles are electric, autonomous and cab-less. That means there is no traditional driver’s seat, steering wheel area or cab built for a human operator.
The trucks use SAE Level 4 autonomous technology. In other words, the vehicle can drive itself under specific approved conditions without a human driver inside.
However, the trucks will still have human oversight. A remote operator will monitor them from off-site and can intervene when needed. The companies say that setup helps keep operations running safely and smoothly during the test.
Where will the autonomous trucks operate?
The trucks will move freight between EASE Logistics warehouses in Marysville, Ohio. They will operate during the summer of 2026 on private property and local public roads.
That detail makes a difference because many autonomous vehicle tests happen in controlled settings. This project moves closer to normal freight work. These trucks will operate inside daily logistics
EASE says the deployment will generate data on how autonomous trucks affect warehouse movement, distribution timing and transportation operations. The companies want to see how this technology performs in the real world, where freight schedules and traffic conditions rarely behave perfectly.
THE ROAD TO PROSPERITY WILL BE PAVED BY AUTONOMOUS TRUCKING
EASE Logistics and Einride will operate driverless electric freight trucks between Ohio warehouse locations while collecting data on safety, efficiency and logistics operations. (Kurt “CyberGuy” Knutsson)
Why Ohio is testing cab-less electric trucks
Ohio has become an active testing ground for truck automation. This deployment extends the Ohio Department of Transportation and DriveOhio’s Truck Automation Corridor Project, in partnership with the Indiana Department of Transportation. The project is designed to evaluate how autonomous technology affects operations, safety and freight efficiency.
EASE President and CEO Peter Coratola, Jr., said, “EASE is proud to continue advancing the Truck Automation Corridor Project alongside DriveOhio and innovative partners like Einride.” He added, “Deployments like this help move autonomous trucking from controlled pilots into daily freight operations, where safety, reliability, and efficiency can be evaluated at scale.”
This also marks EASE Logistics’ third autonomous trucking deployment with DriveOhio. That puts the company among a small group of logistics providers testing multiple autonomous freight platforms in live operations.
How safe are cab-less electric trucks?
When people hear “driverless truck,” their first thought may not be efficiency. It may be, “What happens if something goes wrong?”
That reaction is fair. These vehicles are large, heavy and operate near the public. So safety will shape how people judge this project.
Einride CEO Roozbeh Charli said, “Deploying these autonomous trucks in daily logistics operations with EASE reflects years of rigorous development and real-world validation.” He added, “Safety is not a feature we add to our technology; it is the foundation everything is built on.”
The companies also say a remote operator monitors the trucks off-site and can intervene if needed. That detail helps, but the public will still want clear answers about routes, oversight, emergency response and how remote operators step in. Those answers will become more important as autonomous trucks leave closed test areas and enter everyday traffic.
Why companies want driverless freight
For logistics companies, the appeal is easy to understand. Electric autonomous trucks could help move freight with fewer emissions, more predictable scheduling and tighter warehouse coordination.
Short warehouse-to-warehouse routes also make sense for early autonomous deployments. The route is limited. The operation is easier to study. The company can collect useful data without starting with long-haul trucking across several states.
Still, the rollout will need to prove itself. Trucks must handle traffic, road conditions, pedestrians and unexpected behavior from human drivers. Those moments will test whether autonomous freight can deliver on its promise.
The future of autonomous trucking
Autonomous trucking has moved from bold promise to real-world testing. Yet the industry still has to earn public confidence.
This Ohio deployment gives EASE, Einride and transportation officials a chance to gather useful data. It also gives the public a closer look at what driverless freight looks like.
The cab-less design may be the most striking part. Removing the cab signals a bigger shift. These trucks are built around the idea that the vehicle, software and remote operations team can handle the job.
That marks a major change in how freight has worked for generations.
TESLA BUILDS A CAR WITH NO STEERING WHEEL. NOW WHAT?
Ohio officials are expanding autonomous freight testing with cab-less electric trucks operating on public roads under remote human supervision this summer. (Kurt “CyberGuy” Knutsson)
What this means to you
You may not live near Marysville, Ohio. Still, this test matters because it shows where freight transportation is heading.
If the project works well, more companies could look at autonomous trucks for warehouse-to-warehouse routes. That could change how goods move before they ever reach store shelves or your front door.
It could also raise new questions for workers. Logistics companies may need more people who can monitor, maintain and manage autonomous systems. At the same time, drivers and warehouse workers will want honest answers about how these trucks could affect jobs over time.
For consumers, the biggest issue may be trust. People will want proof that these vehicles can operate safely around regular traffic. They will also want transparency when something goes wrong.
Join CyberGuy Live: Lock Down Your Phone in 30 Minutes (Saturday, June 13, 10 am ET)
Your phone holds your email, passwords, photos, banking apps and personal data. In this free, live online class, Kurt the CyberGuy will walk you step by step through simple phone security fixes you can do in real time. You’ll learn how to improve your privacy settings, spot the latest phone scams, use trusted security tools and walk away with a simple checklist to stay protected. Register here: CyberGuyLive.com
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Kurt’s key takeaways
Cab-less electric trucks on Ohio roads may sound alarming at first. But this project shows how quickly autonomous freight is moving into real logistics work. The EASE and Einride deployment still has plenty to prove. Safety, public trust, worker impact and day-to-day reliability will all matter. However, this summer’s test could give the trucking industry a clearer look at what comes next. Driverless freight may start with short warehouse routes. Over time, it could reshape how goods move across the country.
Would you feel comfortable sharing the road with a cab-less electric truck if no driver was inside, but a remote operator was watching from miles away? Let us know by writing to us at CyberGuy.com.
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
Copyright 2026 CyberGuy.com. All rights reserved.
It’s the world’s worst kept secret that Nvidia is about to announce its own Arm-powered laptop chips at Computex this weekend, and now Microsoft, Nvidia, and Arm are all openly teasing the announcement. The Windows and Nvidia GeForce accounts on X both posted “A new era of PC” earlier today, and now Arm has followed up with an identical post.
All three posts include coordinates pointing to where Computex is hosted in Taipei. Nvidia is holding a Computex keynote in Taipei at 8PM PT / 11PM ET on Sunday night, where it’s rumored to be announcing its new N1 and N1x laptop chips.
These Arm-powered Nvidia processors have been long-rumored, with reports earlier this year suggesting that both Lenovo and Dell have been preparing new laptops with the N1X chips. We first heard rumors about Nvidia’s laptop processors in 2023, and Dell CEO Michael Dell hinted at the possibility of an AI PC with Nvidia during an interview in 2024.
Nvidia’s entry into Windows on Arm will mean Qualcomm will no longer have an exclusive license for Microsoft’s Windows 11 Arm variant of its operating system. That’s good news for laptop competition, even if Qualcomm is trying to keep entry-level laptops affordable with its new Snapdragon C platform.
-
Utah2 minutes agoMan guilty of crash that killed Utah CEO and his daughter gets maximum sentence – East Idaho News
-
Vermont5 minutes agoFallen solar panels in Vermont prompt environmental concerns – Valley News
-
Virginia10 minutes agoManhunt underway for suspect in Virginia accused of killing sheriff’s deputy
-
Wisconsin20 minutes ago11 Wisconsin Towns With A Slower Pace Of Life
-
West Virginia25 minutes agoWest Virginia Racing Heritage Festival showcases state’s dirt track racing history at Pennsboro Speedway
-
Wyoming32 minutes agoLummis family could cash in on Microsoft data center expansion through Cheyenne land sales
-
Crypto35 minutes agoWhat is a ‘wrench attack,’ and why are they on the rise globally?
-
Finance40 minutes agoGoldman Sachs massively resets Snowflake stock price target for 2026
