Google Issues Warning: Fake VPN Application Spreads Spyware And Steal User Data

JAKARTA - Google issued a serious warning regarding the increasing spread of malware disguised as VPN applications. These applications trick users in various countries with a legitimate appearance. However, this application secretly collects personal data and even installs high-risk tools such as spyware and banking trojans.

VPN (Virtual Private Network) has been known as a tool to protect the user's digital identity. However, in Google's latest security and fraud report for the November 2025 edition, the company warned that cybercriminals are now taking advantage of public trust in VPN to spread malicious malware.

According to Google, threat actors disguise malware in the form of VPN applications and apps that look legitimate. They often imitate the well-known VPN brand and use attractive ads to trick users into installing it.

What makes it dangerous is that this fake app works like a real VPN on the surface so users don't immediately get suspicious. However, behind the scenes, the app sends personal data to malicious servers and installs high-risk software such as info-stealer, banking trojan, or remote-access tools that can provide full access to victims' devices.

In its warning, Google confirmed that even official app stores like the Google Play Store are not completely immune from infiltration of malicious apps. Therefore, users are advised:

Download only from trusted sources, such as the official Google Play Store.

Make sure the app has a verified VPN badge before installation.

Check the application permission carefully. If the application asks for access to contacts, photos, or messages, it is irrelevant to the VPN function immediately delete the application.

Enable the Google Play Protect feature to scan and alert suspicious apps automatically.

Google also reminds that many users actually become victims because they feel safe after installing fake VPNs. With the increase in digital fraud and the spread of covert spyware, the company emphasizes the importance of user awareness in choosing and checking security applications.

"VPN should protect privacy, not steal it," Google's message said in its report.