It also shows a total disregard for standard VPN practices that put their users at risk.
However,we found multiple instances of internet activity logson their shared server.
However, this is contrary to what we found during our research.
But rare are these times.
The snippet of log data displayed below is a sample taken from the database.
It shows the package names for numerous VPN apps writing user data to the unsecured server.
Super VPN’s branding is very similar to other affected VPNs
The package names all share a similar template.
The same package name is also connected to the VPNs website URLhttp://free-vpn.io/.
The website for this app is https://www.fastvpn.im/.
Super VPN’s branding is very similar to other affected VPNs
This confirmed thatthe database was real and the data was live.
However,we faced considerable obstaclesin doing so.
We sent two replies to the company twice butreceived no further communication.
We made two more attempts at contacting individuals working at Dreamfii directly, including its Company Director.
The same day,we received the following response from the UFO VPN Team:
1.
And now it has been fixed.
Those using cryptocurrency are also recorded in logs that identify them by their email and other identifiers.
They confirmthe database was live and the contents were real.
A phishing campaign involves sending fake emails to a target, imitating a real business.
VPN users rely on the privacy and anonymitya VPN provides for many reasons.
But the most important benefit is keeping both your online activity and identity hidden, and separate.
In doing so, they compromised the safety and security of their users.
There are someexcellent free VPNsthat dont compromise on security and follow strict privacy protocols.
Every identified weakness is meticulously investigated for any instances of exposed data.
Our team was able to access this database because it was completely unsecured and unencrypted.
Whenever we find a data breach, we use expert techniques to verify the owner of the database.
These ethics also mean we carry a responsibility to the public.
The purpose of this web mapping project is to helpmake the internet safer for all users.
Our ethical security research team has discovered and disclosed some of the most impactful data leaks in recent years.
[Publication date: 10th July 2020]
just, comment on how to improve this article.
