VPNs with Chinese military links still available on Google Play and Apple App Store 2 months after being discovered
The discovery didn't concern any of the best VPNs – these providers are reputable and safe – but over 20 VPNs were found to have links to the Chinese military and posed a risk to anyone who downloaded them.
The Tech Transparency Project (TPP) was behind the investigation, with the Financial Times also contributing to the report.
Two months later, the TPP has found that many of these dangerous VPN apps remain on app stores – and Apple and Google may even be profiting from these apps that put the data of Americans, and national security, at risk.
The true ownership of these VPNs is deliberately confusing. Layers of offshore shell companies obscure the actual owners and hide their Chinese links.
The company Qihoo 360 was revealed as the owner of at least five apps. Qihoo 360 has previously been declared a "Chinese Military Company" and was sanctioned by the US in 2020.
Turbo VPN, VPN Proxy Master, Thunder VPN, Snap VPN, and Signal Secure VPN were at least five of the VPNs that were connected to Qihoo 360.
Qihoo 360 is not listed as the app's developer, but the TPP's earlier investigation traced app ownership back to the company.
The TPP reported that Thunder VPN and Snap VPN had been removed from the US Apple App Store, but Tom's Guide saw Thunder VPN listed.
In its new update, the TPP reported that Thunder VPN had now been removed, along with Signal Secure VPN.
However, at the time of writing, Tom's Guide found that Thunder VPN was still present on both the UK and US Apple App Store, along with Turbo VPN and VPN Proxy Master.
The TPP reported that 11 other Chinese-linked VPNs also remained on the Apple App Store.
These VPNs were: X-VPN, Ostrich VPN, VPNIFY, VPN Proxy OvpnSpider, WireVPN, Now VPN, Speedy Quark VPN, Best VPN Proxy AppVPN, HulaVPN, Wirevpn, and Pearl VPN.
The TPP reported that Turbo VPN, VPN Proxy Master, Snap VPN, and Signal Secure VPN were all found on the US Google Play Store, as well as seven other Chinese-linked VPNs.
These were: X-VPN, Speedy Quark VPN, vpnify, Ostrich VPN, VPN Proxy OvpnSpider, HulaVPN, and VPN Proxy AppVPN.
Tom's Guide also confirmed that at the time of writing Turbo VPN, Thunder VPN, VPN Proxy Master, Signal Secure VPN were all present on the US Google Play Store. But it also confirmed that Snap VPN was present, contrary to what the TPP found.
Chinese data laws mean the government can demand companies share data with them. The absence of a verified no-logs policy results in copious amounts of user data being collected and stored by these VPNs.
Data can include IP addresses, browsing activity, device identifiers, and location. The sharing of this data with the Chinese government can pose a serious risk to Americans and, in the worst case, a US national security risk.
Currently there is no evidence to suggest a serious threat, but how much American data has been accessed is unknown. The fact collection can take place, and potentially be exploited, is a cause for concern.
It isn't just Chinese-owned VPNs that are a threat. There are numerous dangerous and fake VPNs out there – owned and operated by countries all over the world.
US-based big tech giants, such as Apple and Google, have equally poor privacy credentials. They collect data from millions of Americans and are more than happy to pass it on to governments.
All the VPNs discussed are free to download, but many offer in-app purchases and provide the option to upgrade to premium plans.
Subscriptions can be taken out by the user and this means Apple and Google could be taking a cut of any in-app purchases made.
Apple states that it takes a 30% cut of in-app purchases (15% for those enrolled in its small business program). Google charges 15% for sales up to $1 million and 30% for anything above that.
Apple's App Review Guidelines say "apps offering VPN services may not sell, use, or disclose to third parties any data for any purpose, and must commit to this in their privacy policy."
Google Play also has a VPN app policy which states a VPN service cannot be used to "collect personal and sensitive user data without prominent disclosure and consent."
Tom's Guide approached both Apple and Google for comment.
A Google spokesperson said: "Google is committed to compliance with applicable sanctions and trade compliance laws."
"When we locate accounts that may violate these laws, our related policies or Terms of Service, we take appropriate action."
"Google Play is committed to protecting user privacy and providing a safe and secure environment for our users."
"Apps that are deceptive, malicious, or intended to abuse or misuse any network, device, or personal data are strictly prohibited."
Apple told us it doesn't limit an app's ownership and it has strict guidelines for VPN app developers. It said VPN apps must clearly state what user data is collected, if any, and how it will be used.
No data must be disclosed to third parties, and developers must commit to this in their privacy policies.
Apple said that it is in full compliance with regulations and the law. If it finds a developer breaking any rules, action will be taken against them.
Two months after first highlighting the dangers of these apps, we can continue to advise you to stay away from them. Despite being popular, these VPNs should not be downloaded or used.
Every VPN we recommend on Tom's Guide is reputable, safe, and won't put your data at risk. We look for, and analyze, no-logs policies to ensure they don't collect, store, and share your data.
Verified no-logs policies are a must-have for the leading and most secure VPNs, and Windscribe's recent court case showed just how important they are.
You shouldn't always trust the number of app store downloads or reviews a VPN app has and our range of guides can help you make an informed VPN decision.
Not all free VPNs are dangerous. The best free VPNs will protect your data with the same level of encryption as their paid counterparts and are covered by the same no-logs policies.
We'd also recommend a paid VPN over a free one. But if a free VPN is all you can manage, the providers we recommend will protect you and your online activity.
We test and review VPN services in the context of legal recreational uses. For example: 1. Accessing a service from another country (subject to the terms and conditions of that service). 2. Protecting your online security and strengthening your online privacy when abroad. We do not support or condone the illegal or malicious use of VPN services. Consuming pirated content that is paid-for is neither endorsed nor approved by Future Publishing.
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
NBC News
41 minutes ago
- NBC News
China's EV industry is spending more on factories abroad than at home for the first time
BEIJING — Chinese electric car companies are increasing investments in overseas factories as they ramp up competition against Tesla and other global automakers. For the first time since records going back to 2014, the Chinese electric car supply chain last year invested more outside the country than at home, according to a U.S.-based consulting firm Rhodium Group report published Monday. The bulk of announced overseas investment, or 74%, was in battery factories, the report said. But it noted investment in assembly plants abroad was also 'growing rapidly.' The spending plans come as Chinese automakers face intense competition at home and higher tariffs on exports. Boosting investments abroad can help Chinese businesses win foreign governments' support for market expansion. 'Growing regulatory pushback in host markets like the EU is raising barriers to entry and will push more Chinese companies to establish local manufacturing operations,' the Rhodium report said. The Chinese electric car industry's domestic investment in manufacturing tumbled sharply to $15 billion in 2024 from $41 billion in 2023 — after peaking at over $90 billion in 2022 in announced projects, according to Rhodium data. While overseas investment has remained far lower, it 'narrowly surpassed' domestic levels in 2024 for the first time, the report said, without sharing an exact figure. More deals in the pipeline Automotive was the second-most active sector for Chinese outbound investment in the second quarter this year, according to a separate Rhodium study released late July. The materials and metals sector ranked first. 'We recorded higher than usual activity by EV parts manufacturers, with eight transactions exceeding $100 million,' the July report said. 'The largest among them was led by GEM, a Chinese battery materials manufacturer, which committed $293 million to expand its ternary precursors facility in Indonesia.' Several overseas factory projects announced in recent years have also begun operations. Great Wall Motor announced over the weekend it opened its first factory in Brazil on Friday local time. The company is also reportedly considering another factory in the region and would make the decision as soon as the middle of next year. The Chinese automaker did not immediately respond to a CNBC request for comment. BYD also started production at its first Brazil factory in July, despite getting fined earlier in the year over labor practices. The Chinese electric car giant has sold more than 545,000 cars overseas this year as of July, exceeding the total of more than 417,000 vehicles for the whole of 2024, according to CNBC calculations of publicly disclosed data. Earlier this summer, Chinese battery supplier Envision announced in June it officially started production at its first factory in France. However, those investments abroad comprise completed projects only. Just 25% of all announced overseas manufacturing plans by the Chinese electric car industry have been completed, far below the 45% rate for those at home, Rhodium said in Monday's report, noting projects outside the country are twice as likely to get cancelled. 'Chinese firms will also have to manage Beijing's increasing concern over technology leakage, job losses, and industrial hollowing-out, which may result in tighter controls on outbound investment in strategic sectors,' the report said.
Business Insider
an hour ago
- Business Insider
Tesla Stock (TSLA) Motors as Musk Launches Chinese Rescue Mission With New Model Y
Elon Musk is ready to take the fight once more to China with the launch of Tesla's (TSLA) new Model Y L car. Elevate Your Investing Strategy: Take advantage of TipRanks Premium at 50% off! Unlock powerful investing tools, advanced data, and expert analyst insights to help you invest with confidence. The EV maker, which has spluttered in the ever-competitive Chinese market this year, promised that the new vehicle was 'coming soon,' according to a report on Reuters. Tesla shares rose 0.6%. Best Seller The declaration was said to have been made on Chinese social media platform Weibo (WB) today. Tesla also shared a video of the new model, which is a six-seat version of its best-selling Model Y. Tesla, led by chief executive Musk, is hoping that the car will help refresh its line-up and help beat off rivals such as Chinese EV maker Xiaomi (XIACF) and its electric YU7 SUV. It was launched to much excitement in June. So much so that Xiaomi said it received 200,000 orders in just three minutes after launch. It is priced at around $35,000, making it 4% cheaper than Tesla's rival Model Y in China. It also boasts a top range of 835 km, leaving the Model Y with its 719 km reach way behind in its rear-view mirrors. It can also accelerate from zero to 62mph in just 3.23 seconds. China Crisis This focus on performance and price has hit Tesla hard in China. It registered an 8.4% fall in July sales of its China-made electric vehicles to 67,886 units. This marked the sixth month out of seven this year where Tesla's Shanghai shipments have seen a decline, reflecting the mounting pressure Tesla faces in the world's largest EV market. This is important given that a fifth of total Tesla revenue comes from China. It's not only the price war which has knocked Tesla off course in China and elsewhere around the globe this year. Musk's involvement with the Trump administration and his flirtation with right-wing politics has also knocked the company's brand reputation. Tesla hopes the new Model Y will help spark a renaissance. In addition, a longer-range, rear-wheel drive Model 3 is also reportedly coming to the Chinese market. Is TSLA a Good Stock to Buy Now? On TipRanks, TSLA has a Hold consensus based on 14 Buy, 15 Hold and 8 Sell ratings. Its highest price target is $500. TSLA stock's consensus price target is $307.23, implying a 7.70% downside.
Business Wire
2 hours ago
- Business Wire
AEye and Black Sesame Technologies Sign Strategic Cooperation Agreement to Advance Autonomous Safety in China
PLEASANTON, Calif.--(BUSINESS WIRE)--AEye, Inc. (Nasdaq: LIDR), a pioneer in high-performance lidar technology and creator of the Apollo lidar sensor, today announced that it has signed a strategic cooperation agreement with Black Sesame Technologies, a leading provider of automotive-grade computing platforms and solutions for smart vehicles. This collaboration is expected to deliver a world-class AI-based obstacle detection and early warning system that provides ultra-long-range and highly reliable enhancements to safety in all facets of railway operations. This partnership marks a milestone in AEye's expansion into mainland China by integrating AEye's Apollo long‑range lidar sensor with Black Sesame Technologies' advanced chipset and perception software. The collaboration is intended to deliver a full‑stack, plug‑and‑play solution tailored to address the critical safety demands of high-speed transportation networks. 'I couldn't be more excited about our partnership with Black Sesame Technologies. Pairing our industry-leading 1550 nm Apollo lidar with Black Sesame Technologies' intelligent perception stack is anticipated to create a best‑in‑class solution for customers in China, currently the world's largest lidar market,' said Matt Fisch, Chief Executive Officer of AEye. 'Working with our partners at Black Sesame Technologies, we intend to enable faster deployment and delivery of meaningful safety improvements across transportation networks – a powerful alignment of innovation and purpose.' 'Our partnership with AEye pioneers a new standard for AI-based rail safety,' said Wilson Liu, Co-founder & President at Black Sesame Technologies. 'By fusing ultra-long-range sensing with mission-critical computing, we're intending to deliver the world's most reliable obstacle detection system for trains. We are very pleased that our system has been selected by a top-tier Chinese OEM. This collaboration positions us to capture transformative opportunities in autonomous safety.' About AEye AEye offers unique software-defined lidar solutions that enable advanced driver-assistance, vehicle autonomy, smart infrastructure, security, and logistics applications that save lives and propel the future of transportation and mobility. AEye's flagship product, Apollo, has been widely recognized for its small form factor and its ability to detect objects at up to one kilometer. In addition to Apollo as a stand-alone sensor, AEye also offers a full-stack solution through its OPTIS™ platform. OPTIS™ provides a complete system that captures a high-resolution 3D image of the world, interprets it, and provides direction to act upon what it sees in real-time. About Black Sesame Technologies Black Sesame Technologies is a leading provider of automotive-grade computing platforms and solutions for smart vehicles. Founded in 2016, Black Sesame Technologies has been listed on the main board of the Hong Kong Stock Exchange since 2024, under stock code The Company started with the Huashan Series of high-computing power platforms for autonomous driving and released the Wudang Series of cross-domain platforms in 2023 to address more diverse and sophisticated demands for advanced functionalities in smart vehicles, while also beginning to expand into other applications. Black Sesame Technologies' proprietary automotive-grade products and technologies empower smart vehicles with mission-critical capabilities, such as ADAS, smart cockpit, advanced imaging, and interconnection. The Company offers full-stack ADAS capabilities to meet broad customer needs through automotive-grade computing platforms and solutions, powered by the Company's own IP cores, algorithms, and support software. Forward-Looking Statements Certain statements included in this press release that are not historical facts are forward-looking statements within the meaning of the federal securities laws, including the safe harbor provisions under the United States Private Securities Litigation Reform Act of 1995. Forward-looking statements are sometimes accompanied by words such as 'believe,' 'continue,' 'project,' 'expect,' 'anticipate,' 'estimate,' 'intend,' 'strategy,' 'future,' 'opportunity,' 'predict,' 'plan,' 'may,' 'should,' 'will,' 'would,' 'potential,' 'seem,' 'seek,' 'outlook,' and similar expressions that predict or indicate future events or trends, or that are not statements of historical matters. Forward-looking statements are predictions, projections, and other statements about future events that are based on current expectations and assumptions and, as a result, are subject to risks and uncertainties. Forward-looking statements in this press release include, without limitation, statements about the capabilities of the products expected to result from the collaboration between AEye and Black Sesame Technologies, and the potential benefits and market acceptance in China of such products, among others. These statements are based on various assumptions, whether or not identified in this press release. These forward-looking statements are provided for illustrative purposes only and are not intended to serve as and must not be relied on by an investor as a guarantee, an assurance, a prediction, or a definitive statement of fact or probability. Actual events and circumstances are very difficult or impossible to predict and will differ from the assumptions. Many actual events and circumstances are beyond the control of AEye. Many factors could cause actual future events to differ from the forward-looking statements in this press release, including but not limited to: (i) the risks that the strategic cooperation agreement between AEye and Black Sesame Technologies may not advance autonomous safety in China to the extent or in the time frame anticipated, or at all; (ii) the risks that the strategic cooperation agreement between AEye and Black Sesame Technologies may not deliver a world-class AI-based obstacle detection and early warning system that provides ultra-long-range and highly reliable enhancements to safety in all facets of railway operations to the extent or in the time frame anticipated, or at all; (iii) the risks that the integration of AEye's Apollo long-range lidar sensor with Black Sesame Technologies' advanced chipset and perception software may not be successful to the extent anticipated, or at all; (iv) the risks that the collaboration may not deliver a full-stack, plug-and-play solution tailored to address the critical safety demands of high-speed transportation networks to the extent or in the time frame anticipated, or at all; (v) the risks that pairing the Apollo lidar sensor with Black Sesame Technologies' intelligent perception stack may not create a best‑in‑class solution for customers in China to the extent or in the time frame anticipated, or at all; (vi) the risks that AEye and Black Sesame Technologies may not enable faster deployment nor deliver meaningful safety improvements across transportation networks to the extent or in the timeframe anticipated, or at all; (vii) the risks that the partnership between AEye and Black Sesame Technologies may not pioneer a new standard for AI-based rail safety to the extent anticipated, or at all; (viii) the risks that fusing ultra-long-range sensing with mission-critical computing may not deliver the world's most reliable obstacle detection system for trains to the extent or in the time frame anticipated, or at all; (ix) the risk that the selection of AEye and Black Sesame Technologies by a top-tier Chinese OEM may not yield some or all of the anticipated benefits of such selection, in whole or in part, due to changes, delays, or cancellation of the program by the Chinese OEM, the performance of the lidar sensor or other components, or otherwise; (x) the risks that the collaboration may not position either or both parties to capture transformative opportunities in autonomous safety to the extent or in the time frame anticipated, or at all; (xi) the risks that lidar adoption may occur slower than anticipated or fail to occur at all; (xii) the risks that AEye's products may not meet the diverse range of performance and functional requirements of target markets and customers; (xiii) the risks that AEye's products may not function as anticipated by AEye, or by target markets and customers; (xiv) the risks that AEye may not be in a position to adequately or timely address either the near or long-term opportunities that may or may not exist in the evolving autonomous transportation industry; (xv) the risks that laws and regulations are adopted impacting the use of lidar that AEye is unable to comply with, in whole or in part; (xvi) the risks associated with changes in competitive and regulated industries in which AEye operates, variations in operating performance across competitors, and changes in laws and regulations affecting AEye's business; (xvii) the risks that AEye is unable to adequately implement its business plans, forecasts, and other expectations, and identify and realize additional opportunities; and (xviii) the risks of economic downturns and a changing regulatory landscape in the highly competitive and evolving industry in which AEye operates. These risks and uncertainties may be amplified by current or future global conflicts and current and potential trade restrictions, trade tensions, and tariffs, all of which continue to cause economic uncertainty. You should carefully consider the foregoing factors and the other risks and uncertainties described in the 'Risk Factors' section of the periodic report that AEye has most recently filed with the U.S. Securities and Exchange Commission, or the SEC, and other documents filed by us or that will be filed by us from time to time with the SEC. These filings identify and address other important risks and uncertainties that could cause actual events and results to differ materially from those contained in the forward-looking statements. Forward-looking statements speak only as of the date they are made. Investors are cautioned not to put undue reliance on forward-looking statements; AEye assumes no obligation and does not intend to update or revise these forward-looking statements, whether as a result of new information, future events, or otherwise. AEye gives no assurance that AEye will achieve any of its expectations.
