Can a compromized browser know your ISP's IP even if using a VPN?



  • Let's say you use a reliable VPN like ProtonVPN to browse the Internet. In theory, can a compromized browser betray you? Does it has access to your ISP's IP?

    As a bigger picture, if you want to upload some sentive material, can a compromized browser track your activity and report to "someone", maybe with your real IP along?

    I'm not referring to Chrome of course, but I consider any browser untrusted by default.



  • A VPN only protects the connection to the VPN exit, nothing more. It does not restrict what can be connected to and what information can be exchanged. A compromised browser could simply phone home through the VPN and submit all relevant information about what you are doing. A VPN will not prevent such phoning home but instead protects it like all the other traffic. Such a compromise could be as simple as using a malicious browser extension, which includes previously innocent extension which gone rogue.



Suggested Topics

  • 2
  • 2
  • 2
  • 2
  • 2
  • 2
  • 2
  • 2