Google has issued a new warning for all Android users who download apps from the Google Play Store. The company is alerting users to a growing number of malicious apps pretending to be legitimate VPN services, but instead secretly installing malware on devices.
The risk is especially high for users trying to access adult content. With new age-verification laws now enforced in the UK and, more recently, Italy, many minors are turning to VPN apps to bypass location restrictions.
Cybercriminals are taking advantage of this trend by releasing fake VPN apps across app stores and various websites. These fake apps can infect your phone or tablet with info-stealers, remote-access trojans, and banking trojans designed to steal personal data, private messages, and even financial information.
Both Google and security researchers warn that attackers are using advanced advertising campaigns to trick users into downloading these dangerous apps.
Google explained in a recent blog post that cybercriminals are distributing malicious apps disguised as trusted VPN services across multiple platforms, putting users’ security and privacy at serious risk. According to the company, attackers often impersonate well-known enterprise and consumer VPN brands, or use social-engineering tactics — including sexually suggestive ads or geopolitical-related lures — to trick vulnerable users searching for safe internet access.
Once these fake VPN apps are installed, attackers can inject malware into the device and gain access to sensitive information, including passwords. This stolen data can then be used to hijack online accounts or even encrypt personal files, allowing cybercriminals to demand ransom payments for their release.
How to recognize genuine VPN apps
Google suggests installing VPN services only from reputable sources, never through advertisements or attachments in emails. There are numerous protection techniques available in the Google Play Store, including Google Play Protect and a specific VPN badge for legal apps that have been previously authenticated.
The company further warns, “Be skeptical of free offers and avoid sideloading unknown apps.”
Otherwise, you can use VPN programs that we’ve tried and recommended. When you install new apps on your device, you should always check which portions of the system they have access to and, if necessary, restrict access permissions.
