Malware Apps Posing as Free VPNs on the Rise, Warns Cybersecurity Firm
A new report from cybersecurity firm Cleafy has sounded a warning about a rising malware threat that infects personal devices by posing as a free VPN app. The malware, known as Klopatra, has already compromised around 3,000 devices in Italy and Spain, according to the report.
Klopatra disguises itself as Mobdro Pro IP VPN, a free VPN app that appears to be legitimate but is actually a malicious tool designed to steal sensitive information and take control of users' devices. Once installed, Klopatra uses accessibility services to pose as the user, allowing it to access banking apps and drain accounts.
"Cleafy's report highlights the growing threat of malware apps masquerading as VPNs," said a spokesperson for Cleafy. "These types of attacks are becoming increasingly sophisticated, making it essential for users to be vigilant when downloading apps."
The rise of Klopatra is part of a larger trend of malware apps pretending to be free VPNs, which has been warned about by Kaspersky security researchers in 2024. This warning was issued at a time when VPN usage was already on the rise due to age-restriction laws.
Mobdro, the popular IPTV app that Klopatra is piggybacking off of, has been taken down by the Spanish government at least once before. However, the Mobdro Pro IP VPN app appears to be unrelated and is using the name as a malware vector.
"Cleafy's report suggests that the group behind Klopatra is likely a sophisticated threat actor with a clear goal in mind," said a cybersecurity expert not affiliated with Cleafy. "The fact that they have already compromised over 3,000 devices in Italy and Spain is a cause for concern."
Klopatra's ability to assimilate devices into its botnet also raises concerns about the potential for further attacks.
"The implications of this malware are significant," said the Cleafy spokesperson. "We urge users to be cautious when downloading apps and to always verify the authenticity of VPN providers before using them."
The report concludes that Klopatra is just one example of a larger trend of malware apps masquerading as VPNs, highlighting the need for increased vigilance from users and cybersecurity firms alike.
Background:
VPN usage has been on the rise in recent years due to age-restriction laws and increasing concerns about online security. However, this has also led to an increase in malware apps posing as free VPNs, which can compromise user devices and steal sensitive information.
Additional Perspectives:
Experts warn that users should be cautious when downloading apps, especially those that offer free services. "Users need to be aware of the risks associated with downloading free VPN apps," said a cybersecurity expert not affiliated with Cleafy. "It's essential to do your research and verify the authenticity of VPN providers before using them."
Current Status:
Cleafy is urging users to remove any instances of Klopatra from their devices and to take steps to protect themselves against future attacks.
"We urge users to be vigilant and take necessary precautions to prevent malware infections," said the Cleafy spokesperson. "We will continue to monitor the situation and provide updates as more information becomes available."
Next Developments:
Cleafy plans to release a follow-up report on Klopatra in the coming weeks, which will provide further analysis of the malware and its implications for users.
"We will continue to work with cybersecurity firms and law enforcement agencies to combat this threat," said the Cleafy spokesperson. "Our goal is to protect users from these types of attacks and ensure that their devices remain secure."
*Reporting by Engadget.*
