{"id":182639,"date":"2026-07-14T10:53:24","date_gmt":"2026-07-14T08:53:25","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/analiz-bezopasnosti-281-vpn-prilozheniya-dlya-android"},"modified":"2026-07-14T10:53:24","modified_gmt":"2026-07-14T08:53:25","slug":"analiz-bezopasnosti-281-vpn-prilozheniya-dlya-android","status":"publish","type":"post","link":"https:\/\/prohoster.info\/nl\/blog\/news\/analiz-bezopasnosti-281-vpn-prilozheniya-dlya-android","title":{"rendered":"Veiligheidsanalyse van 281 VPN-applicaties voor Android","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Onderzoekers van de Universiteit van Michigan hebben de tool MVPNalyzer ontwikkeld om informatielekken vast te stellen en de werking van VPN's te analyseren. Ze hebben 281 VPN-apps voor het Android-platform getest. De meest populaire VPN-apps, die via de Google Play Store worden verspreid, werden geselecteerd voor het onderzoek. VPN-apps waarin bepaalde beveiligings- en privacyproblemen werden ontdekt, hebben samen 2,4 miljard installaties. Belangrijkste bevindingen:    <\/p>\n<ul>\n<li class=\"l\"> In 61 apps (22%) werd gegevensoverdracht zonder encryptie gedetecteerd, die buiten de opgegeven tunnel plaatsvond. De meeste apps in deze categorie zijn populair en gemiddeld goed voor 11 miljoen installaties. In 18 apps werd rechtstreeks verbinding gemaakt met de dienst ip-api.com om de locatie te bepalen via <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/nl\/lir\/ipv4\/\" title=\"het IP-adres\" data-wpil-keyword-link=\"linked\">het IP-adres<\/a> de klant.\n<p>In 5 gevallen werden configuratiebestanden zonder encryptie naar de klant verzonden, met daarin de verbindingsparameters voor de VPN-server. De onderzoekers voerden een experiment uit en bevestigden de mogelijkheid van een MITM-aanval, waarmee het verkeer naar hun <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/nl\/server\/\" title=\"server\" data-wpil-keyword-link=\"linked\">server<\/a>toe kon worden geleid, met de mogelijkheid om zich in te werken in het communicatiekanaal van het slachtoffer, bijvoorbeeld via een ongecontroleerd openbaar draadloos netwerk. Problematische apps (de volledige lijst van alle apps waarin problemen zijn vastgesteld, wordt gepresenteerd op pagina 17 van het PDF-rapport):  <\/p>\n<ul>\n<li class=\"l\"> BambooVPN: Turbo Fast VPN (free.vpn.unblock.proxy.bamboovpn);\n<li class=\"l\"> VPN Pro (com.nebulatech.voocvpnpro);\n<li class=\"l\"> Free VPN (com.appoxide.freevpn);\n<li class=\"l\"> Hexa VPN (com.secure.vpn.proxy);\n<li class=\"l\"> 101 VPN (com.shwe.vpn101).  <\/ul>\n<p>Onderzoekers waarschuwden voor problemen met de auteurs van deze applicaties en voerden na enige tijd een hercontrole uit van de meest recente versies, die aantoonde dat de kwetsbaarheid alleen in twee applicaties was verholpen \u2014 VPN Pro en Hexa VPN.    <\/p>\n<li class=\"l\"> Bij het gebruik van 29 apps (10%) ontstaat er een lek van verkeer buiten de opgegeven tunnel. In 24 apps, goed voor 360 miljoen installaties, vond een lek van gegevens over bezochte websites plaats door directe verzending van DNS-verzoeken (20 verzonden DNS-verzoeken via een lokale resolver en 6 via publieke DNS-diensten van Google, Cloudflare, AliDNS en DNSPod). In 6 apps, met in totaal 54 miljoen installaties, werd buiten de tunnel verkeer verzonden dat verband hield met de activiteiten van de gebruiker in de webbrowser. In 4 apps werden gegevens verzonden via een onversleutelde tunnel.    <img decoding=\"async\" src=\"\/wp-content\/uploads\/2026\/07\/6d7ae9a29d210a4b0d21ad47ad555b40.png\" style=\"display:block;margin: 0 auto\" \/>\n<li class=\"l\"> In 169 applicaties (60%) werd geen verkeerobfuscatie toegepast, werden standaard netwerkpoorten gebruikt en waren de protocollen traceerbaar binnen het algemene verkeer. Dit gedrag wijkt af van de verwachtingen van gebruikers \u2014 volgens een enqu\u00eate die vorig jaar is uitgevoerd, denkt 82% van de VPN-gebruikers dat een VPN hen anonimiteit biedt.\n<li class=\"l\"> In 76 apps (27%) unique device identifiers AAID (Android Advertising ID) were transmitted, allowing for tracking of devices and users. In 246 apps (87%) access to known advertising networks and user tracking services was recorded (with a total of 3714 different URLs accessed). One app sent precise GPS coordinates of the device.    <img decoding=\"async\" src=\"\/wp-content\/uploads\/2026\/07\/e9895cf2be1b5a0067ad4d932db977dc.png\" style=\"display:block;margin: 0 auto\" \/>\n<li class=\"l\"> In 107 apps (38%) settings were used that do not ensure optimal security levels. In 20 apps, totaling 40 million installations, insecure encryption methods were applied. In 96 apps, totaling 728 million installations, unreliable authentication mechanisms were used.\n<p>In 3 applicaties was in de instellingen van OpenVPN de parameter data-ciphers ingesteld op 'none', waardoor ongecodeerde verbindingen mogelijk waren. In 8 applicaties was de parameter 'cipher' ingesteld op 'none', wat het versleutelen uitschakelt bij gebruik van OpenVPN 2.4 en eerdere versies. In 12 applicaties werden verouderde instructies gebruikt. In 61 applicaties waren de instructies voor het blokkeren van bekende aanvalsmethoden niet opgenomen in de OpenVPN-configuratie.            <\/ul>\n<p>Bron: <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=65892\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041c\u0438\u0447\u0438\u0433\u0430\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 MVPNalyzer \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0442\u0435\u0447\u0435\u043a \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0440\u0430\u0431\u043e\u0442\u044b VPN, \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u043b\u0438 \u0441 \u0435\u0433\u043e \u043f\u043e\u043c\u043e\u0449\u044c\u044e 281 VPN-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android. \u0414\u043b\u044f \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u0431\u044b\u043b\u0438 \u043e\u0442\u043e\u0431\u0440\u0430\u043d\u044b \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 VPN-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 Google Play. VPN-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0442\u0435 \u0438\u043b\u0438 \u0438\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u0438 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u043e\u0441\u0442\u044c\u044e, \u0432 \u0441\u0443\u043c\u043c\u0435 \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0442 2.4 \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":182640,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182639","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041c\u0438\u0447\u0438\u0433\u0430\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 MVPNalyzer \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0442\u0435\u0447\u0435\u043a \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0440\u0430\u0431\u043e\u0442\u044b VPN, \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u043b\u0438 \u0441 \u0435\u0433\u043e \u043f\u043e\u043c\u043e\u0449\u044c\u044e 281 VPN-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Alexander Kovalev\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/nl\/blog\/news\/analiz-bezopasnosti-281-vpn-prilozheniya-dlya-android\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"nl_NL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0410\u043d\u0430\u043b\u0438\u0437 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 281 VPN-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f Android | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041c\u0438\u0447\u0438\u0433\u0430\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 MVPNalyzer \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0442\u0435\u0447\u0435\u043a \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0440\u0430\u0431\u043e\u0442\u044b VPN, \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u043b\u0438 \u0441 \u0435\u0433\u043e \u043f\u043e\u043c\u043e\u0449\u044c\u044e 281 VPN-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/nl\/blog\/news\/analiz-bezopasnosti-281-vpn-prilozheniya-dlya-android\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-07-14T08:53:25+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-07-14T08:53:25+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Security Analysis of 281 VPN Applications for Android | ProHoster","description":"Researchers from the University of Michigan developed a tool called MVPNalyzer to identify information leaks and analyze VPN performance, testing 281 VPN applications for the Android platform.","canonical_url":"https:\/\/prohoster.info\/nl\/blog\/news\/analiz-bezopasnosti-281-vpn-prilozheniya-dlya-android","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"nl_NL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u043d\u0430\u043b\u0438\u0437 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 281 VPN-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f Android | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041c\u0438\u0447\u0438\u0433\u0430\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 MVPNalyzer \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0442\u0435\u0447\u0435\u043a \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0440\u0430\u0431\u043e\u0442\u044b VPN, \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u043b\u0438 \u0441 \u0435\u0433\u043e \u043f\u043e\u043c\u043e\u0449\u044c\u044e 281 VPN-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android.","og:url":"https:\/\/prohoster.info\/nl\/blog\/news\/analiz-bezopasnosti-281-vpn-prilozheniya-dlya-android","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-07-14T08:53:25+00:00","article:modified_time":"2026-07-14T08:53:25+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"182639","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-05 12:22:04","updated":"2026-08-05 12:22:04","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts\/182639","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/comments?post=182639"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts\/182639\/revisions"}],"predecessor-version":[{"id":182683,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts\/182639\/revisions\/182683"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/media\/182640"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/media?parent=182639"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/categories?post=182639"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/tags?post=182639"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}