Security researchers warn against using shady VPN Android apps

what is a vpn header image
Maksim Kabakou / 123RF
If you’ve ever needed to conduct business over the internet somewhat privately on your phone, a virtual private network — or VPN, for short — is an excellent way to go about it. It’s basically an encrypted third-party middleman that sits between you and the wider internet, protecting your data from prying eyes.

And its practically foolproof — even if a hacker were to penetrate the “tunnel,” so to speak, they would struggle to read the data within. But to use a virtual private network, you need an app, and not all apps are as secure as the virtual private network itself.

Security researchers at CSIRO’s Data 61, the University of New South Wales, and UC Berkeley studied 283 VPN apps for Android available from the Google Play Store. A whopping 38 percent of the apps on the Google Play Store that were tested contained some form of malware, adware, trojan, or spyware, while 67 percent featured at least one third-party tracking library. As many as 82 percent requested permissions to access sensitive user data, including text messages and call logs.

The researchers categorized the “worst offenders” — apps with an excessive amount of malware — in a top-ten chart.

And to make matters worse, many fell short of delivering the anonymity they promised. Around 18 percent of the VPN apps didn’t encrypt traffic, and 16 percent routed traffic through other users of the same app rather than a dedicated server. And as many as 66 percent leaked traffic, which the researchers noted could “ease online tracking activities” performed by unscrupulous Wi-Fi hot spot administrators and “surveillance agencies.”

Worryingly, more than 25 percent of the apps received at least a 4-star rating. “According to the number of installs of these apps, millions of users appear to trust VPN apps despite their potential maliciousness. In fact, the high presence of malware activity in VPN apps that our analysis has revealed is worrisome given the ability that these apps already have to inspect and analyze all user’s traffic with the VPN permission,” the researchers wrote.

Ultimately, the survey’s authors recommend “looking before you leap,” in a sense — in other words, researching the VPN apps you’re considering and ensuring they act and behave as advertised. Be especially wary of free apps, they say. Stick to well-known companies that are transparent about their practices. And if an app requests access to sensitive information during the installation process for no good reason, it’s probably best to get rid of it.


Samsung Gear owners may want to wait before upgrading to Android 9.0 Pie

Those who own a Samsung Gear and also looking to update their device to Android 9.0 Pie, Google's latest operating system, may want to wait. Users are running into an issue when pairing a Gear device to an Android smartphone.
Home Theater

Here's how to preserve your precious VHS memories in a modern format

There's no reason you should have to lose those precious home videos just because VHS is a dying format. Here, we'll show you how to convert VHS tapes to a digital format, and save those memories forever.
Home Theater

Get the most boom for your buck with the best headphones under $100

Everybody wants a bargain, and this list has a bunch. For those looking for a solid set of headphones without spending a big stack of cash, this list is is your starting point. Check out all of our picks for the best headphones under $100.
Emerging Tech

Widespread internet access is causing mass sleep deprivation, study suggests

A study claims that high-speed internet may be costing us up to 25 minutes of sleep per night. And, surprisingly, the biggest problem isn't among those young people who are under 30.

Samsung confirms the debut of its foldable smartphone isn't far away

Samsung has been showcasing bendable display tech for a few years now and a folding smartphone might finally become a reality. The Galaxy X, or perhaps the Galaxy F, may be the company's first example. Here's everything we know about it.

Apple's AirPower charging pad may cost $150, sport 22 wireless charging coils

At its September event last year, Apple unveiled the AirPower -- its new wireless charging mat that will allow you to charge multiple devices at one time. It has not yer been released. Here's everything we know about the device so far.
Emerging Tech

No keyboard? No problem. Masterkey will project you a virtual one to type on

Miss having a physical keyboard when you're out and about? Wish you could have a mobile display bigger than your smartphone can offer? Masterkey 4.0 is a wireless projector that promises to help.

Samsung Galaxy Note 9 vs. Apple iPhone X: Battle of the ultra-premium smartphones

The new Samsung Galaxy Note 9 is the company's latest ultra-premium smartphone. The device boasts top-tier specs, an excellent design, and more. But can it take out the Apple iPhone X, Apple's own ultra-premium device?

Need to record calls on an iPhone? Check out our handy guide

Are you wondering how to record calls on your iPhone? It isn't as easy as you might think, but we'll walk you through the process of doing so with Google Voice, and identify several other apps and external voice recorders that can help.

Spotify vs. Pandora: Which music streaming service is better for you?

Which music streaming platform is best for you? We pit Spotify versus Pandora, two mighty streaming services with on-demand music and massive catalogs, comparing every facet of the two services to help you decide which is best.

Google tracks your location — even when you deny it permission

Google is tracking your location -- even when you tell it not to. According to an investigation by the Associated Press, Google services on both Android and iPhones store location data, regardless of whether privacy settings claim…

How to transfer your contacts between iPhone and Android devices

There's nothing worse than getting a new phone and realizing you don't have any of your old contacts listed. Luckily, it's an easy problem to solve. Here's how to transfer your contact list to your new device.
Social Media

Kids can now initiate a friend request on Messenger Kids by using a password

Facebook's messaging app for the under-13 crowd required parents, not kids, to initiate the process of adding a friend. Now kids can start the process by using a unique passphrase -- a feature that still requires parental approval.

Motorola’s P30 looks like every other iPhone X-clone we don’t want

Motorola may be planning to launch a new series of smartphones called the P30, P30 Note, and P30 Play. Leaked photos show the P30 has a similar design to the iPhone X, complete with a screen notch.