Security researchers found that a free VPN extension for Chrome with over 100k is taking screen grabs of users' browsing and uploading them to a remote server.