{"id":182639,"date":"2026-07-14T10:53:24","date_gmt":"2026-07-14T08:53:25","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/analiz-bezopasnosti-281-vpn-prilozheniya-dlya-android"},"modified":"2026-07-14T10:53:24","modified_gmt":"2026-07-14T08:53:25","slug":"analiz-bezopasnosti-281-vpn-prilozheniya-dlya-android","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/analiz-bezopasnosti-281-vpn-prilozheniya-dlya-android","title":{"rendered":"An\u00e1lise de seguran\u00e7a de 281 aplicativos VPN para Android","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Pesquisadores da Universidade de Michigan desenvolveram a ferramenta MVPNalyzer para detectar vazamentos de informa\u00e7\u00f5es e analisar o desempenho de VPNs, testando 281 aplicativos de VPN para a plataforma Android. Foram selecionados os aplicativos de VPN mais populares, distribu\u00eddos atrav\u00e9s do cat\u00e1logo Google Play. Os aplicativos de VPN que apresentaram problemas de seguran\u00e7a e privacidade somam 2,4 bilh\u00f5es de instala\u00e7\u00f5es. Principais conclus\u00f5es:    <\/p>\n<ul>\n<li class=\"l\"> Em 61 aplicativos (22%) houve transmiss\u00e3o de dados sem criptografia, realizada fora do t\u00fanel estabelecido. A maioria dos aplicativos dessa categoria \u00e9 popular, com uma m\u00e9dia de 11 milh\u00f5es de instala\u00e7\u00f5es. Em 18 aplicativos, houve acesso direto ao servi\u00e7o ip-api.com para determinar a localiza\u00e7\u00e3o pelo <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/pt\/lir\/ipv4\/\" title=\"endere\u00e7o IP\" data-wpil-keyword-link=\"linked\">endere\u00e7o IP<\/a> cliente.\n<p>Em 5 casos, foram enviados arquivos de configura\u00e7\u00e3o ao cliente sem criptografia, contendo par\u00e2metros de conex\u00e3o ao servidor VPN. Os pesquisadores realizaram um experimento e confirmaram a possibilidade de um ataque MITM, permitindo redirecionar o tr\u00e1fego para seu <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/pt\/server\/\" title=\"servidor\" data-wpil-keyword-link=\"linked\">servidor<\/a>, tendo a capacidade de intervir na comunica\u00e7\u00e3o da v\u00edtima, por exemplo, algu\u00e9m conectado a uma rede sem fio p\u00fablica controlada pelo atacante. Aplicativos problem\u00e1ticos (a lista completa de todos os aplicativos com problemas est\u00e1 na p\u00e1gina 17 do relat\u00f3rio em PDF):  <\/p>\n<ul>\n<li class=\"l\"> BambooVPN: Turbo Fast VPN (free.vpn.unblock.proxy.bamboovpn);\n<li class=\"l\"> VPN Pro (com.nebulatech.voocvpnpro);\n<li class=\"l\"> Free VPN (com.appoxide.freevpn);\n<li class=\"l\"> Hexa VPN (com.secure.vpn.proxy);\n<li class=\"l\"> 101 VPN (com.shwe.vpn101).  <\/ul>\n<p>Os pesquisadores notificaram sobre os problemas dos desenvolvedores desses aplicativos e, ap\u00f3s algum tempo, realizaram uma nova verifica\u00e7\u00e3o das vers\u00f5es mais recentes, que mostrou que a vulnerabilidade foi corrigida apenas em dois aplicativos \u2014 VPN Pro e Hexa VPN.    <\/p>\n<li class=\"l\"> Em 29 aplicativos (10%), ocorre vazamento de tr\u00e1fego fora do t\u00fanel estabelecido. Em 24 aplicativos, que somam 360 milh\u00f5es de instala\u00e7\u00f5es, informa\u00e7\u00f5es sobre sites visitados vazaram devido ao envio direto de consultas DNS (20 enviaram consultas DNS atrav\u00e9s de resolutores locais, e 6 atrav\u00e9s de servi\u00e7os DNS p\u00fablicos como Google, Cloudflare, AliDNS e DNSPod). Em 6 aplicativos, com 54 milh\u00f5es de instala\u00e7\u00f5es, foi identificado o envio de tr\u00e1fego fora do t\u00fanel, relacionado ao uso do navegador web pelo usu\u00e1rio. Em 4 aplicativos, os dados foram transmitidos atrav\u00e9s de um t\u00fanel n\u00e3o criptografado.    <img decoding=\"async\" src=\"\/wp-content\/uploads\/2026\/07\/6d7ae9a29d210a4b0d21ad47ad555b40.png\" style=\"display:block;margin: 0 auto\" \/>\n<li class=\"l\"> Em 169 aplicativos (60%) n\u00e3o foi utilizada ofusca\u00e7\u00e3o de tr\u00e1fego, foram utilizados ports de rede t\u00edpicos e protocolos rastre\u00e1veis no fluxo geral. Esse comportamento diverge das expectativas dos usu\u00e1rios \u2014 de acordo com uma pesquisa realizada no ano passado, 82% dos usu\u00e1rios de VPN acreditam que a VPN lhes proporciona anonimato.\n<li class=\"l\"> Em 76 aplicativos (27%), eram enviados identificadores AAID (Android Advertising ID) \u00fanicos para os dispositivos, permitindo rastrear dispositivos e usu\u00e1rios. Em 246 aplicativos (87%), foram registradas solicita\u00e7\u00f5es a redes de publicidade conhecidas e servi\u00e7os de rastreamento de usu\u00e1rios (com um total de 3714 diferentes URLs registrados). Um aplicativo enviou coordenadas GPS exatas do dispositivo.    <img decoding=\"async\" src=\"\/wp-content\/uploads\/2026\/07\/e9895cf2be1b5a0067ad4d932db977dc.png\" style=\"display:block;margin: 0 auto\" \/>\n<li class=\"l\"> Em 107 aplicativos (38%), foram aplicadas configura\u00e7\u00f5es que n\u00e3o garantem um n\u00edvel ideal de seguran\u00e7a. Em 20 aplicativos, totalizando 40 milh\u00f5es de instala\u00e7\u00f5es, foram utilizadas m\u00e9todos de criptografia inseguros. Em 96 aplicativos, totalizando 728 milh\u00f5es de instala\u00e7\u00f5es, foram empregados mecanismos de autentica\u00e7\u00e3o n\u00e3o confi\u00e1veis.\n<p>Em 3 aplicativos, nas configura\u00e7\u00f5es do OpenVPN, o par\u00e2metro data-ciphers foi definido como 'none', permitindo a cria\u00e7\u00e3o de canais de comunica\u00e7\u00e3o sem criptografia. Em 8 aplicativos, o par\u00e2metro 'cipher' foi definido como 'none', desativando a criptografia ao usar OpenVPN 2.4 e vers\u00f5es anteriores. Em 12 aplicativos, foram usadas diretivas que foram declaradas obsoletas. Em 61 aplicativos, a configura\u00e7\u00e3o do OpenVPN n\u00e3o inclu\u00eda diretivas para bloquear m\u00e9todos de ataque conhecidos.            <\/ul>\n<p>Fonte: <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=65892\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041c\u0438\u0447\u0438\u0433\u0430\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 MVPNalyzer \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0442\u0435\u0447\u0435\u043a \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0440\u0430\u0431\u043e\u0442\u044b VPN, \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u043b\u0438 \u0441 \u0435\u0433\u043e \u043f\u043e\u043c\u043e\u0449\u044c\u044e 281 VPN-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android. \u0414\u043b\u044f \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u0431\u044b\u043b\u0438 \u043e\u0442\u043e\u0431\u0440\u0430\u043d\u044b \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 VPN-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 Google Play. VPN-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0442\u0435 \u0438\u043b\u0438 \u0438\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u0438 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u043e\u0441\u0442\u044c\u044e, \u0432 \u0441\u0443\u043c\u043c\u0435 \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0442 2.4 \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":182640,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182639","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041c\u0438\u0447\u0438\u0433\u0430\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 MVPNalyzer \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0442\u0435\u0447\u0435\u043a \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0440\u0430\u0431\u043e\u0442\u044b VPN, \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u043b\u0438 \u0441 \u0435\u0433\u043e \u043f\u043e\u043c\u043e\u0449\u044c\u044e 281 VPN-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Alexander Kovalev\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/pt\/blog\/news\/analiz-bezopasnosti-281-vpn-prilozheniya-dlya-android\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"pt_PT\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0410\u043d\u0430\u043b\u0438\u0437 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 281 VPN-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f Android | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041c\u0438\u0447\u0438\u0433\u0430\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 MVPNalyzer \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0442\u0435\u0447\u0435\u043a \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0440\u0430\u0431\u043e\u0442\u044b VPN, \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u043b\u0438 \u0441 \u0435\u0433\u043e \u043f\u043e\u043c\u043e\u0449\u044c\u044e 281 VPN-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/pt\/blog\/news\/analiz-bezopasnosti-281-vpn-prilozheniya-dlya-android\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-07-14T08:53:25+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-07-14T08:53:25+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47An\u00e1lise de seguran\u00e7a de 281 aplicativos de VPN para Android | ProHoster","description":"Pesquisadores da Universidade de Michigan desenvolveram a ferramenta MVPNalyzer para identificar vazamentos de informa\u00e7\u00f5es e analisar o funcionamento de VPNs, e testaram-na em 281 aplicativos de VPN para a plataforma Android.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/analiz-bezopasnosti-281-vpn-prilozheniya-dlya-android","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u043d\u0430\u043b\u0438\u0437 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 281 VPN-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f Android | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041c\u0438\u0447\u0438\u0433\u0430\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 MVPNalyzer \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0442\u0435\u0447\u0435\u043a \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0440\u0430\u0431\u043e\u0442\u044b VPN, \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u043b\u0438 \u0441 \u0435\u0433\u043e \u043f\u043e\u043c\u043e\u0449\u044c\u044e 281 VPN-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/analiz-bezopasnosti-281-vpn-prilozheniya-dlya-android","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-07-14T08:53:25+00:00","article:modified_time":"2026-07-14T08:53:25+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"182639","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-05 12:22:04","updated":"2026-08-05 12:22:04","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/182639","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=182639"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/182639\/revisions"}],"predecessor-version":[{"id":182683,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/182639\/revisions\/182683"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media\/182640"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=182639"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=182639"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=182639"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}