This browser claims “perfect privacies protection,” but it acts like malware

A newly analyzed web browser, which has ties to Chinese online gambling platforms and has reportedly been downloaded millions of times, has come under fire for its alarming practices. Research conducted by Infoblox, a network security firm, indicates that this browser reroutes all internet traffic through servers located in China. Furthermore, it allegedly installs several covert programs that operate silently in the background, raising serious concerns about user privacy. The study highlights that these 'hidden' features resemble those typically found in malware. They include key logging, unauthorized connections, and alterations to a device’s network settings. Of particular concern is the discovery that this browser is entangled with Southeast Asia’s vast cybercrime network, which is involved in a range of illicit activities such as money laundering, illegal online gambling, human trafficking, and forced labor scams. Researchers have identified a direct connection between the browser and BBIN, a prominent online gambling company, labeling this association as part of a threat group named Vault Viper. This finding underscores a disturbing trend: criminal organizations in the region are becoming increasingly sophisticated. John Wojcik, a senior threat researcher at Infoblox who previously worked with the UN Office on Drugs and Crime (UNODC), commented on the evolution of these criminal syndicates. He noted, "These groups, especially those linked to Chinese organized crime, are diversifying their operations into cyber-enabled fraud, including scams and impersonation schemes. They are likely to reinvest their profits to enhance their capabilities, leading to a more serious and concerning threat landscape." This browser's dubious behavior is a stark reminder of the growing sophistication of cybercriminals, emphasizing the urgent need for users to remain vigilant about their online security.