In addition to ChatGPT, Claude and Gemini, the extensions collect all conversations from Copilot, Perplexity, DeepSeek, Grok and Meta AI. Koi said the full description of the captured data includes:
- Every message a user sends to the AI
- Every response received
- Conversation IDs and timestamps
- Session metadata
- The specific AI platform and model used
The runner script runs independently of VPN, ad blocking, or other core features. That means that even when a user disables VPN, AI protection, ad blocking, or other features, conversation collection continues. The only way to stop harvesting is to disable the extension in your browser settings or uninstall it.
Koi said he first discovered the conversation in Urban VPN Proxya VPN routing extension that includes “AI protection” as one of its benefits. Data collection began in early July with the release of version 5.5.0.
“Anyone who used ChatGPT, Claude, Gemini, or other specific platforms while Urban VPN was installed after July 9, 2025 should assume that those conversations are now on Urban VPN’s servers and have been shared with third parties,” the company said. “Medical questions, financial details, proprietary code, personal dilemmas, all sold for ‘marketing analysis purposes.'”
Following that discovery, the security company discovered seven additional extensions with identical AI harvesting functionality. Four of the extensions are available in the Chrome Web Store. The other four are on the Edge add-ons page. Collectively, they have been installed more than 8 million times.
They are:
Chrome Store
- Urban VPN proxy: 6 million users
- 1ClickVPN Proxy: 600,000 users
- Urban Navigator Guard: 40,000 users
- Urban ad blocker: 10,000 users
Edge Plugins:
- Urban VPN proxy: 1.32 million users
- 1ClickVPN Proxy: 36,459 users
- Urban Navigator Guard: 12,624 users
- Urban ad blocker: 6,476 users
Read the fine print
The extensions come with mixed messages about how they handle bot conversations, which often contain deeply personal information about users’ physical and mental health, finances, personal relationships, and other sensitive information that could be a gold mine for marketers and data brokers. He Urban VPN Proxy The Chrome Web Store, for example, lists “AI protection” as a benefit. He goes on to say:
