When Free VPNs Turn Into Spies: Why FreeVPN.One Is a Cybersecurity Wake-Up Call

Many small businesses in Central and South Texas rely on free software to cut costs. However, sometimes the “free” tool is the most expensive mistake. A recent report revealed that FreeVPN.One, a free Chrome VPN extension, secretly captured screenshots of user activity and sent them to unknown servers. This is more than just shady coding, it’s a red-flag reminder of why “FREE VPN” cybersecurity risks vigilance isn’t optional.

When your "Privacy VPN" is Actually your Biggest Spy: Meet FreeVPN.One

Spyware in Disguise: What Happened?

Security researchers at Koi Security discovered that FreeVPN.One has been secretly recording information. Although it has a “Featured” and “Verified” badge in the Chrome Web Store, it captures screenshots of every single page you visit. This happens without your knowledge or consent. It has over 100,000 installs.

Here’s how it works:

  • The extension injected a content script into all HTTP and HTTPS sites.
  • About 1.1 seconds after a page loads, it quietly uses the chrome.tabs.captureVisibleTab() API to grab a snapshot.
  • Metadata such as URLs, tab IDs, device info, and your location are bundled with the image and sent off to remote servers (e.g. aitd.one), initially unencrypted, and later wrapped in AES-256-GCM encryption to avoid detection.

The feature advertised as “AI Threat Detection” claims to capture screenshots only when you click it. However, the real magic, which is actually spyware, was already operating in the background on all websites. This includes safe ones like Google Photos or Sheets.

Timeline to Disaster

  • April 2025 (v3.0.3): Extension quietly gains wide-reaching permissions like <all_urls>, but spying hadn’t started yet.
  • June 2025 (v3.1.1): Adds “AI Threat Detection” branding and scripting permissions.
  • July 17, 2025 (v3.1.3): Full-blown surveillance mode activated—screenshots, tracking, and device fingerprinting commence.
  • July 25, 2025 (v3.1.4): Encryption added to obfuscate data exfiltration. CyberInsider

Developer’s Excuses—Or Just Bad PR?

The developer’s defense? The screenshot feature is for “Background Scanning” and should only activate on “suspicious” domains. However, Koi’s evidence shows it’s used indiscriminately, on banking sites, company docs, and even personal feeds.

They also say screenshots aren’t stored but merely analyzed briefly. Unfortunately, there’s no way for users or researchers to independently verify this. All communication ceased when Koi pressed for proof of legitimacy. The sole trail is a Wix-based page with zero corporate presence.

What You Should Do Right Now

  1. If you have FreeVPN.One installed: uninstall it immediately. tomsguide.com+13TechRadar+13CSO Online+13
  2. Run a trusted antivirus or anti-malware scan.
  3. Change passwords for any sites you accessed while the extension was active, just to be safe. The Scottish SunThe Register+3TechRadar+3The Scottish Sun+3
  4. Next time you consider a free VPN, choose one that’s transparent, audited, and doesn’t pretend to protect your privacy while betraying it.

Why This Isn’t Just About One Bad VPN

FreeVPN.One’s “featured” label and apparent legitimacy exposed serious cracks in Chrome Web Store vetting. It’s a cautionary tale that even approved extensions can turn nasty. “The Register“

As Tom’s Guide puts it, not all free VPNs are your friends. Proton VPN Free, for instance, is open-source, audited, and transparent. It throttles after a data cap. tomsguide.com

As the old tech adage goes: “If it’s free, you are the product.” In this case, FreeVPN.One turned your browsing history into their buffet. Let’s do better. Use respected tools. Stay alert. Always keep a side-eye on the apps that promise privacy while prying into your life.

Free Domain Names: How DigitalPlat’s Open-Source Project Is Changing the Web

What if anyone could start a website without paying for a domain name? Thanks to DigitalPlat, a Cloudflare-backed non-profit, that vision is becoming reality. DigitalPlat recently announced an open-source project providing free domain names, aimed at removing financial barriers and making the Internet more accessible.

This initiative isn’t meant to replace traditional domain registrars, it’s designed for students, developers, hobbyists, and creators who want to publish online without cost. For digital nomads and small business owners, projects like this highlight the growing movement toward an Internet that is secure, inclusive, and affordable.

Who Is Behind the Project?

DigitalPlat is supported by major organizations including:

  • Cloudflare
  • GitHub
  • 1Password
  • Twilio
  • The Hack Foundation

The Hack Foundation, founded in 2016, is a U.S.-based 501(c)(3) nonprofit that supports hackathons, coding clubs, and community projects. Its mission: empower people everywhere to build, experiment, and create online. According to their website, “The DigitalPlat Foundation is a global non-profit organization. It supports open-source and community development. They also explore innovative projects.”

What Free Domains Are Available?

DigitalPlat’s free domains are technically subdomains, but they function like traditional domains. Available options include:

  • .DPDNS.ORG
  • .US.KG
  • .QZZ.IO
  • .XX.KG

These domains are licensed under AGPL-3.0 and offered as a sustainable, open-source project, not a trial or limited-time promotion.

The official GitHub Free Domains page recommends managing DNS with services such as Cloudflare, FreeDNS by Afraid.org, or Hostry, all of which offer zero-cost DNS solutions.

Why This Matters for Accessibility

Free domain initiatives like DigitalPlat’s can:

  • Lower barriers for students learning web development.
  • Give non-profits and small communities an affordable way to go online.
  • Provide digital nomads and freelancers a testing ground for side projects.
  • Encourage experimentation in open-source environments.

This aligns with a broader push toward an open and inclusive web. It echoes efforts by nonprofits and tech companies. They aim to bridge the digital divide.

How to Get Started

Anyone interested can explore registration and technical details directly via DigitalPlat’s GitHub project page. The setup is transparent, community-driven, and backed by reputable organizations.

For SMBs and professionals, though, we still recommend owning a traditional domain for branding and authority. A free domain is perfect for side projects—but your main business presence should rest on a custom domain with professional email and hosting. At SofTouch Systems, we assist small businesses and nomads. We help them build reliable online identities with secure hosting. Our services also encompass DNS management and IT support through our IT Consulting Services.

DigitalPlat’s free domain names project is an exciting step toward democratizing the web. The initiative combines open-source transparency with nonprofit sponsorship. It allows anyone, from students to global travelers, to create, share, and publish online without cost.

For those balancing a professional business presence, however, free domains should complement—not replace—your core digital strategy. Trust and authority still begin with owning your name online.

How to Build a Mobile Office That’s Secure and Reliable

As a digital nomad, your office is wherever you open your laptop—whether that’s a café in Prague, a co-working hub in Chiang Mai, or a beachfront villa in Mexico. The freedom is thrilling, but it comes with unique challenges. Without the right setup, unreliable connections and cyber risks can derail your productivity. In this post, we’ll show you how to build a mobile office that’s secure and reliable. It will give you peace of mind as you work from anywhere in the world.

1. Start With Strong, Portable Hardware

Your laptop is your command center. Choose a lightweight, durable device with extended battery life. For digital nomads, look for:

  • 12+ hours of battery life for long café sessions.
  • Lightweight build for easy travel.
  • Solid-state drive (SSD) for speed and resilience.

Pair your laptop with a compact, encrypted external hard drive for backups on the go.

2. Use a Trusted VPN Everywhere

Public Wi-Fi is convenient but dangerous. Hackers often target open networks in airports and cafés. A VPN (Virtual Private Network) encrypts your traffic, making your data unreadable to attackers.

Tip: Choose a VPN with worldwide server coverage for faster speeds and fewer dropped connections.

Explore why VPN vs. Free Wi-Fi is a no-brainer for nomads in our related guide: VPN vs. Free Wi-Fi: Why Paying for Security is Worth It.

3. Implement Cloud Backup and Sync

Losing a laptop abroad can be devastating. A cloud backup service ensures your files and projects are recoverable instantly from any device. Use solutions that provide:

  • Automatic daily sync
  • 30-day file history for recovery
  • Encrypted storage for client confidentiality

At SofTouch Systems, our Digi NITE Essentials Bundle includes secure cloud backups tailored for digital nomads.

4. Secure Your Communications

Clients need to trust your professionalism. Free email services can signal “temporary” or “unreliable.” Instead, use a custom business email with your domain name. This builds trust and authority while protecting sensitive exchanges.

For extra protection:

  • Enable multi-factor authentication (MFA).
  • Use end-to-end encrypted messaging apps (e.g., Signal, ProtonMail).

See our article on Proven Ways a Custom Business Email Boosts Trust and Authority for more.

5. Protect Devices From Physical Theft

Security isn’t just digital. Physical risks are real when working in public spaces. Safeguards include:

  • A privacy screen to block shoulder surfers.
  • Anti-theft laptop locks in shared spaces.
  • Remote wipe setup in case a device is stolen.

6. Build in Redundancy for Reliability

Reliability means having a backup plan:

  • Carry a mobile hotspot with an international SIM card.
  • Use apps like Speedtest to check network quality before critical calls.
  • Have offline access to key files using cloud sync.

Building a secure and reliable mobile office isn’t about expensive tools, it’s about smart preparation. With the right hardware, VPN, cloud backup, custom email, and physical safeguards, you can travel the world while working with confidence.

At SofTouch Systems, we make it easy for digital nomads to thrive. We offer tailored IT solutions. These solutions balance flexibility with top-tier security.