Secure, Free VPN — Are You Sure?
summary
The talk analyzes fraudulent and malicious VPN offerings, demonstrating phishing pages impersonating NordVPN and ProtonVPN, about 50 malicious domains that spawn many more, and packed Windows installers (one padded with zeros to 316 MB) that hide a ~700 KB backdoor. It also presents mobile findings that 75–80% of Android VPN apps include trackers and 82–83% request excessive permissions, using tools like urlscan.io, VirusTotal, Any.run and .NET unpacking/decompilation to expose Vikostiller/RedLine command‑and‑control and credential‑stealing behavior.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 2:50What is a VPN and its uses
- 5:19Free VPN vs user privacy
- 13:53Risks of free VPNs
- 21:05Fake VPN hunting
- 38:27Summary and warnings
- 41:43Invitation and contact
related talks
20mBroken Promises: Who's Accountable When VPNs Fail?
31mPrivacy and Transparency in VPN industry
38mTunnelCrack: Leaking VPN Traffic by Manipulating Routing Tables
35mVPNFilter - YetAnotherBotNet Or Maybe Not...
48mMobile Security Attacks: A Glimpse from the Trenches
31mA comprehensive guide to tracker protection on Android
56mCybersecurity & Privacy From The Global Lens
52mWhere, how, and why is SSL traffic on mobile getting intercepted?