Feds warn that VPN services may land users in the ‘botnet’

Security system design concept. Low angle view close-up on multi colored programming language code and an open 3D glowing wire mesh padlock model in orange color.

Date: June 16, 2024
By Scott Hudson

The FBI recently shut down a cyber-criminal enterprise by the name of “911 S5/Cloudrouter” and arrested YunHe Wang, a Chinese national who they say was the mastermind behind the criminal ring.

According to the FBI, over 19 million computer users were infected.

The FBI contends that Wang and other “bad cyber actors,” targeted users of virtual private networks (or VPNs) by adding in programs to connect to the 911 S5/Cloudrouter service. From there, 911 S5 would insert malware, generally through infected video games.

The malware gives the criminals the ability to hijack the user’s computer without their knowledge and commit cyber attacks, large-scale fraud, child exploitation, harassment, bomb threats, and export violations.

The worst part for law enforcement is that upon first inspection it looks as if the user/victim is actually the one committing the crimes when it is actually someone a world away.

According to Microsoft, VPNs protect their users by encrypting their data and masking their IP addresses. Microsoft’s website explains: “This hides their browsing activity, identity, and location, allowing for greater privacy and autonomy.”

However, sometimes using a VPN can actually put a user in cyber-danger.

The Augusta Press webmaster, Reed McDow, says that people should be very careful if they decide to go the VPN route.

“To say that all VPNs are a scam is not totally true, but they are definitely not a one-all solution as there are other ways to track users’ locations,” McDow said.

The FBI named MaskVPN, DewVPN, PaladinVPN, ProxyGate, ShieldVPN, and ShineVPN as being “nefarious.”

For those who do not want to risk it with a VPN, the FBI offers tips to lessen the chances of becoming a cyber victim.

If an ad pops up that looks suspicious, don’t click on it; also don’t click on attachments from unsolicited email or social media messages, avoid downloading free or untrusted software and keep a current version of anti-virus software installed on the computer.

The FBI does not recommend people abandon VPNs, but issues the following caution: “VPNs do play an important role in securing communications, but like all tools, untrusted VPNs can be weaponized.”

Cross Link Consulting, a web security firm, also cautions against using public WiFi to conduct sensitive business, such as banking or even renewing a driver license, as public WiFi is where most cyber criminals operate.