Malware apps pretending to be free VPNs are on the rise

Cybersecurity company Cleafy only Issue a report Warning about the emergence of a malware called Klopatra, which infects personal devices by pretending to be a free VPN application called Mobdro Pro IP + VPN. This is the latest confirmation A series of warnings Filed by Kaspersky security researchers in 2024 about the growing number of malware apps pretending to be free VPNs – a warning that is more important than ever High VPN usage In response to age restriction laws.

Mobdro is the name of the popular IPTV app It was dropped by the Spanish government At least once, but the Mobdro Pro IP + VPN app appears to be unrelated, as the name is used to be used as a vector for malware. If you download the app, it walks you through what appears to be an installation wizard, but is actually the steps to hand over full control of your device. Once inside, Klopatra abuses accessibility services to pose as you, get into your banking apps, drain your accounts, and integrate your device into a botnet for further attacks.

Klevi believes that Kleopatra has already linked about 3,000 devices into its botnet, mainly in Italy and Spain. Its report concludes that the group behind Cleopatra may be based in Türkiye, and is actively working to improve its approach, incorporating innovations and changing with the times. Hence, using the common free VPN app and cord-cutting as a mask – perfect for exploiting growing frustrations with both the balkanization of streaming and government suppression of web freedom.

According to Kaspersky, other free VPNs used as malware vectors in the past year include MaskVPN, PaladinVPN, ShineVPN, ShieldVPN, DewVPN, and ProxyGate. With Cleopatra’s huge success, Klevy believes imitators will emerge. App stores aren’t always quick to remove implicated apps, so be extra careful to vet any free VPN app before downloading it. If you’re not sure, you can always use one of the free recommendations provided by our site Best VPN List (Proton VPN or Hide.me).