Free VPN apps turn Android phones into criminal proxies

Researchers at HUMAN's Satori Threat Intelligence identified PROXYLIB, a campaign where 28 Android VPN apps (and many more in third-party repositories) used a shared library and the LumiApps SDK to turn users' devices into proxy nodes for cybercriminals; the apps were removed from Google Play, Google Play Protect now blocks the threat, and users are advised to uninstall any listed apps and use mobile security solutions.