Google issues security alert about malicious VPNs stealing user data

The holidays are almost upon us, and Google is giving us some security advice as a gift.

In a wide-ranging fraud and scam advisory blog post on its website, Google warned users of a number things, including malicious VPNs. According to Google, there are bad-faith actors disguising their software as legitimate VPNs for users who feel they might need such a thing. Anyone who downloads one of these might be subject to data theft (or worse). Google did not name any specific examples of VPNs you shouldn't mess with, however.

While it was light on specifics, Google did offer some advice that should help keep you safe.

"Only download VPN apps from official sources, and check for apps with the VPN badge in Google Play. Be skeptical of free offers and avoid sideloading unknown apps," Google wrote. "Users should look carefully at the app's requested permissions — a VPN should not need access to things like your contacts or private messages. Always pay attention to browser download warnings and keep your antivirus software enabled."

In other words, don't sideload strange apps onto your Android device if you don't know where it's coming from. If you're getting something from the Play Store, there should be a verification badge letting you know it's OK to use. Follow this advice and you should have an easier time avoiding serious problems this holiday season.