Description

Detection of usage of a VPN agent. VPNs are often used to spoof physical device location and trick providers into giving services on devices not meant for those geographies.

Usage of VPNs can indicate malicious activity that is intended to trick geofencing restrictions and geolocation risk assessment tools.

Response Guidance

Whether using a VPN cloning framework is a threat to your application or not depends very much on the use case.

If it is detected for one device in combination with other threats, it is advisable to suspend the associated user's app.