CVE Tools

Study of 281 Free Android VPN Apps Finds Traffic Leaks, Unencrypted Data, and Tracking

The Hacker NewsBy The Hacker News

ResearchAndroidVPN Apps

Our summary

A new study analyzed 281 popular free Android VPN apps from the Google Play Store and uncovered significant privacy and security issues. Many failed to protect user data properly, with over 2.4 billion total installations across the problematic apps. Researchers identified leaks of encrypted traffic, unsecured data transmission, and tracking behaviors. Five apps were particularly vulnerable to 'tunnel hijacking,' allowing attackers to redirect connections to malicious servers. The findings highlight poor implementation practices and raise concerns about the reliability of free VPN services. The research team developed MVPNalyzer, a tool designed to systematically audit Android-based virtual private networks.

Read at The Hacker News

The Hacker News publishes this story on its own site; we link to it rather than reprint it.

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store