{"id":56013,"date":"2024-05-07T18:26:23","date_gmt":"2024-05-07T18:26:23","guid":{"rendered":"http:\/\/b93a3438-7bb9-4bc8-8852-7ff31e50c3d6"},"modified":"2024-05-07T18:26:23","modified_gmt":"2024-05-07T18:26:23","slug":"security-researchers-say-this-scary-exploit-could-render-all-vpns-useless","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/security-researchers-say-this-scary-exploit-could-render-all-vpns-useless\/","title":{"rendered":"Security researchers say this scary exploit could render all VPNs useless"},"content":{"rendered":"
\n
\n
\"unencrypted<\/picture><\/div>\n

<\/div>

JuSun\/Getty Images<\/span><\/figcaption><\/figure>\n

Security researchers have revealed a method for rendering any virtual private network (VPN) useless. And they suspect that their exploit may have been in the wild for years — and malicious actors may already know about it.<\/p>\n

Researchers at the Leviathan Security Group have uncovered a method for exposing a user’s traffic when they use a VPN, effectively allowing the attacker to snoop on their unencrypted traffic and gain valuable data from the transfer. The researchers are calling their exploit TunnelVision<\/a> and say that they’ve yet to come across a VPN that doesn’t fall for the trick.<\/p>\n

Also: The best VPN services of 2024<\/a><\/strong><\/p>\n

VPNs play a critical role in secure traffic and data safety. When someone uses a VPN, their internet traffic is encrypted, allowing it to avoid the prying eyes of hackers. But TunnelVision changes that. The researchers said that if they’ve been able to attack a network, they can run a DHCP server that assigns IP addresses for devices on the same network and force traffic to be routed through it. In doing so, they’re able to avoid VPN encryption and view completely unencrypted traffic packets. What’s worse, at no point do users believe their traffic is being sent over an unencrypted connection and the VPNs themselves never alert them to the change.<\/p>\n

To be sure, there are some hoops hackers would need to jump through to take advantage of the exploit, with having actual access to a network being chief among them. But hackers can often sit on hacked networks without alerting anyone, waiting for opportunities to steal data. And TunnelVision is just one of those opportunities.<\/p>\n