A study by researchers from Data61/CSIRO, UC Berkeley, UNSW Sydney, and UCSI finds that several popular VPN services on Android open up a variety of security holes, including injecting JavaScript for ads and tracking services, traffic redirection to commerce sites, and more.
