Google issues alert on malicious VPN apps; warns buyers of festive-season scams

Tech powerhouse Google has issued a warning to consumers regarding the surge of online scams that are being fueled by cybercriminals utilizing advanced artificial intelligence and deceptive software. In an update released on November 6, the company highlighted the alarming rise in threats, particularly focusing on malicious VPN applications that pose significant risks to users. According to Google's latest findings, hackers are increasingly disguising harmful software as trustworthy virtual private network (VPN) tools, tricking users into downloading them. These fraudulent apps often mimic well-known VPN brands or employ aggressive social-engineering tactics, including sexually suggestive advertisements and fear-inducing messaging related to current geopolitical events. Once installed, these malicious VPNs can unleash a host of dangerous malware, including information stealers, remote access trojans, and banking trojans. Google pointed out that these threats allow hackers to access sensitive user data, such as browsing history and login credentials. To combat these risks, Google emphasized the importance of machine learning in detecting harmful applications on Android and Google Play. Users are encouraged to activate Google Play Protect, which can automatically block the installation of high-risk apps that may be sideloaded from various sources. In addition to VPN scams, Google reported a disturbing trend of scams targeting job seekers. Criminal organizations are creating convincing replicas of legitimate recruitment websites, along with fake job offers and fraudulent recruiter profiles. Often, victims are asked to pay upfront fees or share sensitive information during fake interviews. Some are even led to install malicious software under the guise of 'interview tools' that can jeopardize their devices and corporate networks. Google's Misrepresentation policy addresses such fraudulent advertisements, while tools like Gmail phishing detection and Messages Scam Detection provide additional layers of security. Moreover, businesses face threats from review-bombing campaigns, where scammers inundate a business’s profile with false negative reviews, demanding payment to prevent further damage. Google Maps is implementing new reporting features to allow merchants to easily flag extortion attempts. As interest in AI tools surges, criminals are increasingly impersonating reputable services to lure users into downloading harmful applications, subscription scams, or credential-stealing extensions. These scams often promote fake offers of free trials through hijacked social media accounts and malicious ads. Google's enforcement teams are actively working to remove apps that mimic legitimate AI products from the Play Store and Chrome Web Store. They also utilize AI-driven protections in Safe Browsing to alert users about risky downloads in real time. Additionally, individuals who have fallen victim to scams frequently encounter fraudsters posing as investigators or law agencies, claiming they can recover lost funds for an upfront fee. With the holiday shopping season fast approaching, Google anticipates an uptick in fake online stores, misleading discounts, and phishing attempts disguised as delivery notifications. New protective measures have also been introduced for Pixel 9 users who opt for Enhanced Protection in Chrome, leveraging on-device AI models to detect potential threats effectively.