Nearly 30 VPN applications on Android devices were found to have a hidden threat, turning devices into residential proxies without users' knowledge. This allowed cybercriminals to conceal unauthorized activities under the guise of legitimate IP addresses.