Avast said its researchers installed the three apps and successfully purchased subscriptions to each app. However, when they tried to use the VPNs, the apps only provided subscription options again.
The apps are available on the Apple App Store as Beetle VPN, Buckler VPN, and Hat VPN Pro, Avast said.
These three apps have been downloaded over 420K, 271K, and 96K times, respectively, between April 2019 and May 2020, according to data from Sensor Tower, a mobile apps marketing intelligence and insights company.
“Fleeceware apps fall into a gray area, because they are not malicious per se, they simply charge users absurd amounts of money for weekly, monthly or yearly subscriptions for features that should be offered at much lower costs,” Nikolaos Chrysaidos, Head of Mobile Threats & Security at Avast, said in a statement.
The apps” all have high ratings, ranging from 4.6 to 4.8, and include enthusiastic reviews, all similarly written, which Avast considers may potentially be fake.
Avast said its researchers installed the three apps and successfully purchased subscriptions to each app. However, when they tried to use the VPNs, the apps only provided subscription options again.
