The vpnMentor research team found a public database of 20 million users of free VPN services such as UFO VPN, Fast VPN, Free VPN, Super VPN, Flash VPN, Secure VPN and Rabbit VPN.
Experts believe that it may contain information about Russians, including email addresses, unencrypted passwords, IP and home addresses, data on smartphone models and user device identifiers. The total amount of data was 1.2 TB. A leak can lead to spam mailings, phishing or blackmailing users.
These applications are mainly used by poorly versed in technical issues people who need to access blocked sites or change their IP address for free. They can do this for personal purposes, for example, to register several accounts in the game or cheat votes. Free VPN solutions provide a minimum level of anonymity and security for network traffic.
– Ilya Shalenkov, Head of the KPMG Cybersecurity Services Group in Russia and the CIS
Alexei Drozd, head of the information security department of SerchInform, said that the developers of such programs do not guarantee security. They claim that they do not collect logs, but researchers still find this data on the servers. [ Kommersant ]