{"id":182639,"date":"2026-07-14T10:53:24","date_gmt":"2026-07-14T08:53:25","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/analiz-bezopasnosti-281-vpn-prilozheniya-dlya-android"},"modified":"2026-07-14T10:53:24","modified_gmt":"2026-07-14T08:53:25","slug":"analiz-bezopasnosti-281-vpn-prilozheniya-dlya-android","status":"publish","type":"post","link":"https:\/\/prohoster.info\/es\/blog\/news\/analiz-bezopasnosti-281-vpn-prilozheniya-dlya-android","title":{"rendered":"An\u00e1lisis de seguridad de 281 aplicaciones VPN para Android","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Investigadores de la Universidad de Michigan han desarrollado la herramienta MVPNalyzer para detectar filtraciones de informaci\u00f3n y analizar el funcionamiento de VPN, y han probado 281 aplicaciones VPN para la plataforma Android. Se seleccionaron las aplicaciones VPN m\u00e1s populares, disponibles a trav\u00e9s del cat\u00e1logo de Google Play. Las aplicaciones VPN que presentaron diversos problemas de seguridad y privacidad suman un total de 2.4 mil millones de instalaciones. Principales conclusiones:    <\/p>\n<ul>\n<li class=\"l\"> En 61 aplicaciones (22%) se detect\u00f3 la transmisi\u00f3n de datos sin encriptaci\u00f3n, realizada fuera del t\u00fanel establecido. La mayor\u00eda de las aplicaciones de esta categor\u00eda son populares y tienen un promedio de 11 millones de instalaciones. En 18 aplicaciones se realiz\u00f3 una consulta directa al servicio ip-api.com para determinar la ubicaci\u00f3n del <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/es\/lir\/ipv4\/\" title=\"IP\" data-wpil-keyword-link=\"linked\">IP<\/a> cliente.\n<p>En 5 casos, se enviaron sin encriptaci\u00f3n archivos de configuraci\u00f3n al cliente que conten\u00edan los par\u00e1metros de conexi\u00f3n al servidor VPN. Los investigadores llevaron a cabo un experimento y confirmaron la posibilidad de realizar un ataque MITM, permitiendo redirigir el tr\u00e1fico a su <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/es\/server\/\" title=\"servidor\" data-wpil-keyword-link=\"linked\">servidor<\/a>, teniendo la capacidad de interceptar el canal de comunicaci\u00f3n de la v\u00edctima, por ejemplo, al conectarse a una red inal\u00e1mbrica p\u00fablica controlada por el atacante. Las aplicaciones problem\u00e1ticas (la lista completa de todas las aplicaciones que presentaron problemas se presenta en la p\u00e1gina 17 del informe en PDF):  <\/p>\n<ul>\n<li class=\"l\"> BambooVPN: Turbo Fast VPN (free.vpn.unblock.proxy.bamboovpn);\n<li class=\"l\"> VPN Pro (com.nebulatech.voocvpnpro);\n<li class=\"l\"> Free VPN (com.appoxide.freevpn);\n<li class=\"l\"> Hexa VPN (com.secure.vpn.proxy);\n<li class=\"l\"> 101 VPN (com.shwe.vpn101).  <\/ul>\n<p>Los investigadores informaron sobre problemas con los autores de estas aplicaciones y, despu\u00e9s de un tiempo, realizaron una nueva verificaci\u00f3n de las versiones m\u00e1s recientes, que mostr\u00f3 que la vulnerabilidad solo hab\u00eda sido corregida en dos aplicaciones \u2014 VPN Pro y Hexa VPN.    <\/p>\n<li class=\"l\"> En 29 aplicaciones (10%) se produce una p\u00e9rdida de tr\u00e1fico fuera del t\u00fanel establecido. En 24 aplicaciones, que suman 360 millones de instalaciones, se produjo una fuga de informaci\u00f3n sobre los sitios web visitados debido al env\u00edo directo de consultas DNS (20 enviaban consultas DNS a trav\u00e9s del resolvedor local, y 6 a trav\u00e9s de los servicios DNS p\u00fablicos de Google, Cloudflare, AliDNS y DNSPod). En 6 aplicaciones, que suman 54 millones de instalaciones, se detect\u00f3 el env\u00edo fuera del t\u00fanel de tr\u00e1fico relacionado con la actividad del usuario en el navegador web. En 4 aplicaciones, los datos se transmitieron a trav\u00e9s de un t\u00fanel no encriptado.    <img decoding=\"async\" src=\"\/wp-content\/uploads\/2026\/07\/6d7ae9a29d210a4b0d21ad47ad555b40.png\" style=\"display:block;margin: 0 auto\" \/>\n<li class=\"l\"> En 169 aplicaciones (60%) no se utiliz\u00f3 ofuscaci\u00f3n del tr\u00e1fico, se utilizaron puertos de red est\u00e1ndar y protocolos rastreados en el flujo general. Este comportamiento difiere de las expectativas de los usuarios \u2014 de acuerdo con una encuesta realizada el a\u00f1o pasado, el 82% de los usuarios de VPN creen que VPN les proporciona anonimato.\n<li class=\"l\"> En 76 aplicaciones (27%) se transmitieron identificadores \u00fanicos para dispositivos AAID (Android Advertising ID), lo que permite rastrear dispositivos y usuarios. En 246 aplicaciones (87%) se registr\u00f3 acceso a conocidas redes publicitarias y servicios de seguimiento de usuarios (se registr\u00f3 acceso a un total de 3714 URL diferentes). Una aplicaci\u00f3n envi\u00f3 coordenadas GPS exactas del dispositivo.    <img decoding=\"async\" src=\"\/wp-content\/uploads\/2026\/07\/e9895cf2be1b5a0067ad4d932db977dc.png\" style=\"display:block;margin: 0 auto\" \/>\n<li class=\"l\"> En 107 aplicaciones (38%) se utilizaron configuraciones que no proporcionan un nivel \u00f3ptimo de seguridad. En 20 aplicaciones, que en total suman 40 millones de instalaciones, se emplearon m\u00e9todos de cifrado inseguros. En 96 aplicaciones, que totalizan 728 millones de instalaciones, se usaron mecanismos de autenticaci\u00f3n poco fiables.\n<p>En 3 aplicaciones, en la configuraci\u00f3n de OpenVPN, el par\u00e1metro data-ciphers se estableci\u00f3 en el valor \u00abnone\u00bb, permitiendo la creaci\u00f3n de canales de comunicaci\u00f3n sin cifrado. En 8 aplicaciones, el par\u00e1metro \u00abcipher\u00bb se estableci\u00f3 en el valor \u00abnone\u00bb, desactivando el cifrado al usar OpenVPN 2.4 y versiones anteriores. En 12 aplicaciones se utilizaron directivas que se hab\u00edan declarado obsoletas. En 61 aplicaciones, la configuraci\u00f3n de OpenVPN no inclu\u00eda directivas para bloquear m\u00e9todos de ataque conocidos.            <\/ul>\n<p>Fuente: <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=65892\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041c\u0438\u0447\u0438\u0433\u0430\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 MVPNalyzer \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0442\u0435\u0447\u0435\u043a \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0440\u0430\u0431\u043e\u0442\u044b VPN, \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u043b\u0438 \u0441 \u0435\u0433\u043e \u043f\u043e\u043c\u043e\u0449\u044c\u044e 281 VPN-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android. \u0414\u043b\u044f \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u0431\u044b\u043b\u0438 \u043e\u0442\u043e\u0431\u0440\u0430\u043d\u044b \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 VPN-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 Google Play. VPN-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0442\u0435 \u0438\u043b\u0438 \u0438\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u0438 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u043e\u0441\u0442\u044c\u044e, \u0432 \u0441\u0443\u043c\u043c\u0435 \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0442 2.4 \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":182640,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182639","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041c\u0438\u0447\u0438\u0433\u0430\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 MVPNalyzer \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0442\u0435\u0447\u0435\u043a \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0440\u0430\u0431\u043e\u0442\u044b VPN, \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u043b\u0438 \u0441 \u0435\u0433\u043e \u043f\u043e\u043c\u043e\u0449\u044c\u044e 281 VPN-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Alexander Kovalev\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/es\/blog\/news\/analiz-bezopasnosti-281-vpn-prilozheniya-dlya-android\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"es_ES\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0410\u043d\u0430\u043b\u0438\u0437 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 281 VPN-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f Android | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041c\u0438\u0447\u0438\u0433\u0430\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 MVPNalyzer \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0442\u0435\u0447\u0435\u043a \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0440\u0430\u0431\u043e\u0442\u044b VPN, \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u043b\u0438 \u0441 \u0435\u0433\u043e \u043f\u043e\u043c\u043e\u0449\u044c\u044e 281 VPN-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/es\/blog\/news\/analiz-bezopasnosti-281-vpn-prilozheniya-dlya-android\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-07-14T08:53:25+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-07-14T08:53:25+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47An\u00e1lisis de seguridad de 281 aplicaciones VPN para Android | ProHoster","description":"Investigadores de la Universidad de Michigan desarrollaron la herramienta MVPNalyzer para detectar filtraciones de informaci\u00f3n y analizar el funcionamiento de las VPN, y con ella revisaron 281 aplicaciones VPN para la plataforma Android.","canonical_url":"https:\/\/prohoster.info\/es\/blog\/news\/analiz-bezopasnosti-281-vpn-prilozheniya-dlya-android","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"es_ES","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u043d\u0430\u043b\u0438\u0437 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 281 VPN-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f Android | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041c\u0438\u0447\u0438\u0433\u0430\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 MVPNalyzer \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0442\u0435\u0447\u0435\u043a \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0440\u0430\u0431\u043e\u0442\u044b VPN, \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u043b\u0438 \u0441 \u0435\u0433\u043e \u043f\u043e\u043c\u043e\u0449\u044c\u044e 281 VPN-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android.","og:url":"https:\/\/prohoster.info\/es\/blog\/news\/analiz-bezopasnosti-281-vpn-prilozheniya-dlya-android","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-07-14T08:53:25+00:00","article:modified_time":"2026-07-14T08:53:25+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"182639","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-05 12:22:04","updated":"2026-08-05 12:22:04","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/182639","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/comments?post=182639"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/182639\/revisions"}],"predecessor-version":[{"id":182683,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/182639\/revisions\/182683"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/media\/182640"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/media?parent=182639"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/categories?post=182639"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/tags?post=182639"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}