- A malicious free VPN extension is back on the Chrome Store
- The new Free Unlimited VPN extension already has over 31K installs
- Two prior versions were removed after spying on 9+M users
A notoriously dangerous free VPN extension appears to have made its way back to the Chrome Store, and it already has over 31K live installs − a new research report reveals.
The service is linked to a group of malicious VPN extensions operating under the name "Free Unlimited VPN." Two nearly identical free VPN extensions lurked in the Chrome Store for at least six years, silently spying on over 9 million users.
They were removed in May 2025 after being flagged multiple times. Now, security researchers at LayerX Security have discovered that a new iteration of the extension is again putting people's privacy at risk.
"Free VPN extensions promise privacy, speed, and global access with a single click. For millions of users, they’re an easy way to bypass restrictions or hide IP addresses without paying for a subscription. But that promise often hides a tradeoff: if the product is free, your data becomes the product," the researchers note.
The report comes just a week after Google warned users' about malicious VPN apps acting as spyware in disguise.
How Free Unlimited VPN put your data at risk
It only took a quick search on the Chrome Web Store to find the Free Unlimited VPN browser extension, and at first glance, it looked legit. It had more than 110 reviews and an average rating of 4.4 out of 5, while promising total freedom and privacy with "no ads, no registrations, and unlimited traffic."
However, that's not what you'll get if you sign up, according to LayerX Security.
They say both the old and new versions of the VPN browser extension did way more proxy network requests. "They fetched hidden configuration files from remote servers, altered proxy settings in real time, and intercepted browser navigation events, functioning as remote-controlled proxy redirectors with concealed update channels," they wrote.
Simply put, "What appeared to be a simple free VPN was, in practice, a full browser-level surveillance mechanism," warn researchers.
Worse still, the LaxerX Security analysis found that the new version (published in July 2025) is "notably more advanced and evasive than the old one," as its new infrastructure makes it harder to detect malicious activities.
Risks of using the extension span from traffic interception and stealthy redirection to dangerous phishing pages, to persistent remote control, severe privacy breaches, and profiling.
You can read the full security analysis here. If you have the extension downloaded, we strongly recommend uninstalling the app and all the data linked to it as soon as possible.
Bear in mind that there are a few seemingly unrelated VPN apps with similar names, but these aren't the subject of this investigation. And, despite being able to initially find "Free Unlimited VPN" on the Google Web Store while we were writing the story, the app looks to have been removed at the time of publication (November 20).
How to protect yourself from malicious VPNs
LayerX Security's research is the latest in a long line of investigations that have highlighted the dangers hiding behind many free VPN solutions, even those on offer on official app stores.
Even when these apps aren't malicious per se, poor performance and intrusive, data-grabbing ads are often the price to pay when using a free service.
This is why TechRadar only recommends a very few free VPN services.
Proton VPN is among the best free VPNs and the company also offers a reliable VPN Chrome extension app. While it's super secure and private, the free version does come with a few drawbacks, such as not being able to select your server location.
The good news is that subscribing to one of Proton VPN's premium plans has never been cheaper thanks to its early Black Friday VPN deal.
Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds. Make sure to click the Follow button!
You must confirm your public display name before commenting
Please logout and then login again, you will then be prompted to enter your display name.