In addition to ChatGPT, Claude, and Gemini, the extensions harvest all conversations from Copilot, Perplexity, DeepSeek, Grok, and Meta AI. Koi stated the total description of the information captured contains:
- Each immediate a consumer sends to the AI
- Each response obtained
- Dialog identifiers and timestamps
- Session metadata
- The precise AI platform and mannequin used
The executor script runs independently from the VPN networking, advert blocking, or different core performance. That implies that even when a consumer toggles off VPN networking, AI safety, advert blocking, or different capabilities, the dialog assortment continues. The one strategy to cease the harvesting is to disable the extension within the browser settings or to uninstall it.
Koi stated it first found the dialog harvesting in Urban VPN Proxy, a VPN routing extension that lists “AI safety” as one in every of its advantages. The info assortment started in early July with the discharge of model 5.5.0.
“Anybody who used ChatGPT, Claude, Gemini, or the opposite focused platforms whereas City VPN was put in after July 9, 2025 ought to assume these conversations are actually on City VPN’s servers and have been shared with third events,” the corporate stated. “Medical questions, monetary particulars, proprietary code, private dilemmas—all of it, offered for ‘advertising analytics functions.’”
Following that discovery, the safety agency uncovered seven further extensions with an identical AI harvesting performance. 4 of the extensions can be found within the Chrome Internet Retailer. The opposite 4 are on the Edge add-ons web page. Collectively, they’ve been put in greater than 8 million instances.
They’re:
Chrome Retailer
- City VPN Proxy: 6 million customers
- 1ClickVPN Proxy: 600,000 customers
- City Browser Guard: 40,000 customers
- City Advert Blocker: 10,000 customers
Edge Add-ons:
- City VPN Proxy: 1,32 million customers
- 1ClickVPN Proxy: 36,459 customers
- City Browser Guard – 12,624 customers
- City Advert Blocker – 6,476 customers
Learn the superb print
The extensions include conflicting messages about how they deal with bot conversations, which regularly comprise deeply private details about customers’ bodily and psychological well being, funds, private relationships, and different delicate info that might be a gold mine for entrepreneurs and information brokers. The Urban VPN Proxy within the Chrome Internet Retailer, as an example, lists “AI safety” as a profit. It goes on to say:
