NewApp Digest
search bot

free VPN apps

These 20 free VPNs with 700 million downloads all have the same problem
AppWizard
September 11, 2025

These 20 free VPNs with 700 million downloads all have the same problem

Recent research has identified that 20 free VPN applications on Google Play share the same underlying code and a common vulnerability that compromises user data encryption. The study, conducted by researchers from Bowdoin College and Arizona State University, analyzed these apps, which have over 700 million downloads and generate revenue through ads while offering minimal value to users. Notable VPNs included in the study are Tetra VPN, VPN PotatoVPN, and VPN Proxy Master. These applications may mislead users into thinking they have diverse options, but they provide a uniform experience. Additionally, there are concerns about potential vulnerabilities that could expose private data and possible ties to China, a country known for weak privacy protections. The examined VPNs include Turbo VPN, VPN Monster, Snap VPN, and others. In contrast, established VPNs like Proton VPN and NordVPN are noted for their reliability and security.
Android VPN apps used by millions are covertly connected AND insecure
AppWizard
August 19, 2025

Android VPN apps used by millions are covertly connected AND insecure

Recent research from Arizona State University and Citizen Lab has identified connections among three families of Android VPN applications with over 700 million downloads, raising concerns about user privacy and security. The analysis revealed three groups of VPN providers: 1. Group A: Eight apps from three providers sharing identical Java code and libraries, exhibiting vulnerabilities such as: - Collecting location data against privacy policies. - Using weak encryption methods. - Hard-coded Shadowsocks passwords that could allow traffic decryption. 2. Group B: Eight apps from five providers supporting only the Shadowsocks protocol, sharing libraries and hard-coded passwords, with all servers hosted by GlobalTeleHost Corp. 3. Group C: Two providers with one app each, using a custom tunneling protocol and sharing similar code, vulnerable to connection inference attacks. The research highlighted significant privacy breaches, including undisclosed location data collection and vulnerabilities that could allow eavesdroppers to decrypt communications. Alarmingly, these VPN providers are linked to Qihoo 360, a Chinese company that has concealed this connection, raising concerns about potential data sharing with the government due to China's strict laws. Additionally, the Tech Transparency Project found that many free VPN apps on the Apple App Store are also linked to companies in mainland China or Hong Kong without disclosing these ties.
Search