Urban VPN Proxy Spies on AI Chatbot Conversations

Browser Tools Capture Chatbot Data, Sell to Data Broker: Koi Security Rashmi Ramesh (rashmiramesh_) • December 22, 2025

A browser extension promising a free clientless VPN for Chrome users has been harvesting conversations from artificial intelligence chatbot platforms and selling the data to third-party brokers.

See Also: Going Beyond the Copilot Pilot - A CISO's Perspective

Urban VPN Proxy, which carries a 4.7-star rating and a "Featured" badge on the Chrome Web Store, has collected conversation data from eight major AI platforms since July, affecting approximately 8 million users across multiple extensions, said Koi Security. The app harvested every prompt users sent and response they received from ChatGPT, Claude, Gemini, Microsoft Copilot, Perplexity, DeepSeek, Grok and Meta AI.

The data collection operates independently of the VPN functionality itself. Whether users turn on the VPN or disconnect it, the harvesting runs continuously in the background with no user-facing ...