Universe Browser

Chromium-based browser promoted as “fast” and privacy-protecting on Asian online casino sites; according to Infoblox and UNODC (October 2025), it routes all traffic through servers in China, covertly installs programs and extensions (screen capture, keystroke logging) and is linked to the BBIN gambling network (“Vault Viper”).

Facts

Developer

Unknown (linked to the BBIN / Baoying Group online gambling network, a group designated “Vault Viper” by Infoblox)

Website

—

Engines

BlinkWebKit (iOS)

Derived from

Chromium

Platforms

WindowsiOSAndroid

Details

Windows (UB-Launcher installer), iOS app (WebKit, Apple rule), Android APK outside the Play Store; distributed via casino sites in Chinese, Japanese and Korean; spotted in early 2025 by Infoblox/UNODC, first release date unknown

Popularity

59/100 — “Downloaded millions of times” according to Wired/Infoblox (no precise figure)

Sources

1. https://www.wired.com/story/universe-browser-malware-gambling-networks/
2. https://www.androidauthority.com/universe-privacy-browser-malware-3609655/
3. https://healsecurity.com/vault-viper-exploits-online-gambling-websites-using-custom-browser-to-install-malicious-program