Malicious apps masquerading as VPNs can turn your device into a tool for cyber attacks


Virtual private networks (VPNs) are important if you care about your security data and privacy. They create a secure, encrypted connection between your device and the internet, hiding your IP address and protecting your online activities.

There are numerous apps claiming to offer VPN services, but not all of them are legitimate. Some are fakes that try to steal your data.

In the third quarter of 2024, security researchers found that the number of users interacting with fake VPN apps worldwide increased two and a half times compared to the second quarter. These apps were malware or programs that could be used by malicious actors.

I dive into the rise of fake VPN apps and how to stay safe.

I’M GIVING AWAY THE LATEST AND BEST AIRPODS PRO 2

mobile vpn

A VPN on a mobile phone (Kurt “CyberGuy” Knutsson)

What you need to know about the increase in fake VPN apps

According to Kasperskycyber criminals take advantage of people who want to use free VPN services. In May 2024, law enforcement shut down a botnet, a network of hijacked devices, called 911 S5. Several free VPN services, including MaskVPN, DewVPN, PaladinVPN, ProxyGate, ShieldVPN, and ShineVPN, were used to create this botnet.

WHAT IS ARTIFICIAL INTELLIGENCE (AI)?

When users installed these VPN apps, their devices were turned into proxy servers, meaning they were used to redirect someone else’s internet traffic.

This massive network spread across 19 million unique IP addresses in more than 190 countries, making it possibly the largest botnet ever created. The people controlling the botnet sold access to these infected devices to other criminals, who used them for cyber attacks, money laundering and fraud.

laptop vpn

A VPN on a laptop (Kurt “CyberGuy” Knutsson)

HOW TO DELETE YOUR PRIVATE DATA FROM THE INTERNET

Don’t trust free VPNs

You can’t trust free VPN apps because they have no reason to keep you or your data safe. This is why you should be careful:

  • Share data: Many free VPNs share user data with third parties.
  • Weak encryption: About 36% of free VPNs use weak encryption, putting your online security at risk.
  • Data leaks: Nearly 90% of free VPNs leak data in some way, while 17% leak more than they should.
  • Unreliable connections: More than half of free VPNs have unstable connections.
  • Excessive rights: Nearly 70% ask for permissions they wouldn’t need, like tracking your location (20%) or checking what apps you have installed (46%).

Why people fall for fake VPNs

There is a growing demand for VPN apps on all platforms, including smartphones and computers. Users often believe that if they find a VPN app on an official store, such as Google Play, it is safe to use. They are especially attracted to free services and think it’s a great deal. However, this can often be a pitfall.

MAJOR DATA BREACH EXPOSES THE PERSONAL INFORMATION OF 3 MILLION AMERICANS TO CYBERCRIMINALS

Choose trusted VPN services for optimal security and privacy

If you need a VPN, use a service that is well-known, trusted, and not free. Look for sites that are talked about on mainstream sites and backed by solid reviews. If you’re not sure where to start, I’ve put together a handy overview list of my favorite VPNs. I’ve tested them myself and you can trust that they will keep your data safe. For the best VPN software, see my expert review of the best VPNs for private web browsing on your Windows, Mac, Android, and iOS devices.

woman with phone

A woman looks at a VPN app on her phone (Kurt “CyberGuy” Knutsson)

UNDERSTANDING BRUSH CAMMS AND HOW TO PROTECT YOURSELF

7 important tips for choosing and using VPNs

Here are seven essential steps to help you choose a reliable VPN and protect your online privacy.

1. Stick to official app stores: Always download apps from trusted platforms like the App Store for iOS or the Google Play Store for Android. These stores have built-in security measures that help detect and remove fake or malicious apps. Avoid downloading apps from random third-party websites or stores as they are more likely to host malicious software. Even on official stores, check the app’s reviews, ratings, and number of downloads to make sure it is trustworthy.

2. Pay attention to app permissions: Be careful about the permissions you grant to apps during installation. For example, a flashlight app doesn’t need access to your contacts or location. Question any permission that does not fit the functionality of the app. Both iOS and Android allow you to view and manage app permissions in your settings, so take the time to check what you’ve already allowed.

GET FOX BUSINESS ON THE GO BY CLICKING HERE

3. Use two-factor authentication (2FA): Implement 2FA for your VPN accounts to add an extra layer of security beyond just a password.

4. Keep the software up to date: Regularly update all VPN-related software, including clients, servers and associated network hardware, to take advantage of the latest security patches and improvements.

5. Use strong encryption: Look for VPN services that use robust encryption protocols like AES-256 to protect your data.

6. Check VPN Traffic: Continuously monitor VPN traffic and logs for unusual patterns that could indicate security issues.

7. Invest in strong antivirus software: A powerful antivirus program can help detect and remove malware before it compromises your device. Many antivirus apps also come with features like web protection, anti-phishing tools, and the ability to scan new apps for threats. While there are free options, premium versions often offer more comprehensive protection. Look for a trusted name in cybersecurity when choosing an antivirus solution. Discover my picks for the best antivirus protection winners of 2025 for your Windows, Mac, Android, and iOS devices.

Kurt’s most important takeaway

Fake VPN apps are everywhere, and they’re bad news. They’re not just useless. They can turn your device into a tool for cybercriminals. The 911 S5 botnet showed us how dangerous free VPNs can be, turning millions of devices into a giant network for fraud and attack. The truth is that free VPNs aren’t really free. They often have weak security, leak your data or require permission that endangers your privacy. If you’re serious about protecting your online activities, invest in a trusted, paid VPN service.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

How often do you check the credibility of the apps you download? Let us know by writing to us at Cyberguy.com/Contact

For more of my tech tips and security alerts, subscribe to my free CyberGuy Report newsletter by visiting Cyberguy.com/Newsletter

Ask Kurt a question or let us know which stories you would like us to cover

Follow Kurt on his social channels

Answers to the most frequently asked CyberGuy questions:

New from Kurt:

Copyright 2025 CyberGuy.com. All rights reserved.