How were free VPNs like Galleon and Radish involved in cybercrime?

These free VPNs were part of the IPIDEA proxy network, which used unsuspecting users' devices as nodes to mask the activities of over 550 hacking groups.

What actions did Google take against the IPIDEA network?

Google disrupted the IPIDEA network by taking legal action to seize its domains, significantly reducing the number of compromised devices available to the operators.

What risks do users face from applications offering to share internet bandwidth?

Applications that offer payment for 'unused bandwidth' or 'sharing your internet' can be primary ways illicit proxy networks grow, potentially opening security vulnerabilities on a user's device and home network.

Home / Technology / Free VPNs Hijacked Your PC for Cybercrime

Free VPNs Hijacked Your PC for Cybercrime

30 Jan

•

Summary

Over 550 hacking groups used a VPN network for illicit activities.
Free VPNs like Galleon and Radish turned user PCs into proxy nodes.
Google disrupted the IPIDEA network, seizing domains and millions of IPs.

Free VPNs Hijacked Your PC for Cybercrime

A vast network of free VPNs and proxy services, including Galleon VPN and Radish VPN, has been uncovered by Google as a major tool for cybercrime. These services, part of the IPIDEA proxy network, were used by over 550 hacking groups to mask their malicious activities by hijacking millions of legitimate IP addresses. The network operated by sourcing IP addresses from users of these free services, many of whom were unaware their devices were acting as nodes.

Google's investigation found that the IPIDEA network was sourcing IP addresses illicitly, turning user PCs into proxy nodes without clear disclosure. This network also utilized software development kits embedded in over 600 mobile apps, further expanding its reach. Hackers leveraging IPIDEA could mask their activities, making detection difficult for network defenders, and even access users' private devices on the same network.