自2024年7月以来,Chrome扩展程序窃取了多达800万用户的AI聊天数据,并未经同意出售.
A Chrome extension stole AI chat data from up to 8 million users since July 2024 and sold it without consent.
自2024年7月以来,一个名为Urban VPN Proxy的Chrome扩展程序一直在秘密收集高达800万用户的AI聊天机器人对话, 并未经同意将数据出售给第三方.
A Chrome extension called Urban VPN Proxy has been secretly harvesting AI chatbot conversations from up to 8 million users since July 2024, selling the data to third parties without consent.
扩展与来自同一开发商的另外7个开发商一起,在背景中运行,而不论VPN是否使用,并且不能在设置中被禁用。
The extension, along with seven others from the same developer, operates in the background regardless of VPN use and cannot be disabled through settings.
尽管在Chrome Web Store上贴有“Faited”标签,但这些扩展在数据收集方面缺乏透明度,引起对隐私的重大关切。
Despite being labeled "Featured" on the Chrome Web Store, these extensions lack transparency about data collection, raising major privacy concerns.
这一事件突显了浏览器扩展中日益增加的风险,并突出表明需要加强监督和提高用户意识。
The incident highlights growing risks in browser extensions and underscores the need for stronger oversight and user awareness.