This browser claims “perfect privacies protection,” but it acts like malware

The Universe Browser is promoting itself as the “fastest browser” and a shield against privacy leaks, but researchers say it behaves like malware. According to Infoblox and the United Nations Office on Drugs and Crime (UNODC), the browser routes all Internet traffic through servers in China and covertly installs several background programs, with elements including key logging and surreptitious connections.

The team linked the browser to BBIN and broader Southeast Asia cybercrime activity, naming Vault Viper as a threat group associated with the operation. They also note that the browser’s right‑click, settings access and developer tools are disabled and major security features such as sandboxing are compromised, increasing risk compared with mainstream browsers.

The discovery came while examining a Cambodian online casino operation tied to BBIN, and the research covers Windows alongside references to Android and iOS variants whose presence in Google Play is unclear. Last week, authorities seized US$15 billion in Bitcoin from a Cambodian organization connected to scam compounds, underscoring how these networks intersect with the browser’s ecosystem, according to the report. 24 October 2025