Malware targeting Android devices has grown increasingly sophisticated. From fake banking apps to phishing campaigns, attackers are finding new ways to trick you into giving up sensitive data.

One of the newest threats comes in the form of malicious apps that appear legitimate but can take full control of your device. Security researchers are now warning Android users to delete a fake VPN and streaming app that can allow criminals to take over your phone and drain your bank account.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.

How Klopatra infects devices

The malicious VPN and streaming app is called Mobdro Pro IP TV + VPN, and it was recently discovered by researchers at Cleafy. Once you install the app, it drops a malware strain called Klopatra. It’s a new and highly sophisticated Android malware currently being used in active campaigns targeting financial institutions and their customers.

THIS CHROME VPN EXTENSION SECRETLY SPIES ON YOU

Fake VPN apps can hide dangerous malware that steals your data and money. (iStock)

At first glance, the app looks like a free streaming platform offering high-quality channels, which makes it appealing to Android users. Once installed, though, it deploys a banking Trojan and a remote-access tool that give attackers full control over the infected device. With that level of access, criminals can steal your banking credentials and even carry out fraudulent transactions without your knowledge.

The infection chain is carefully planned. It starts with social engineering, tricking you into downloading and installing the app from outside the official Play Store. From there, Klopatra bypasses Android’s built-in protections and reaches deep into the system to gain persistence and control.

HACKERS PUSH FAKE APPS WITH MALWARE IN GOOGLE SEARCHES

The Klopatra Trojan gives hackers full control of infected Android devices. (Kurt “CyberGuy” Knutsson)

Fake VPNs are a growing problem

VPNs are widely promoted as privacy tools that hide your IP address and encrypt internet traffic. Millions rely on them to bypass geographic restrictions, protect sensitive communications or simply browse more securely. Yet not all VPNs are trustworthy. Various studies have proved that popular commercial VPNs have alarming shortcomings. Some use protocols that are not designed to protect privacy, obscure ownership or fail to encrypt traffic properly.

When fake apps like Mobdro are combined with these weaknesses, users are left exposed. Criminals exploit both the popularity of VPNs and the prevalence of pirated streaming services to distribute malware effectively. This growing ecosystem of risky apps underscores how important it is to research, verify and only download software from reputable sources.

SCAMMERS NOW IMPERSONATE COWORKERS, STEAL EMAIL THREADS IN CONVINCING PHISHING ATTACKS

Stay safe by downloading apps only from trusted sources and keeping your phone updated. (Kurt “Cyberguy” Knutsson)

9 steps you can take to protect yourself

If you suspect that you’ve downloaded a fake app from the internet, there’s no need to panic. The steps below will help you stay protected and keep your data safe.

1) Stick to trusted sources

Only download VPNs, streaming services and apps from Google Play, Apple App Store or the official developer’s website. Avoid links in forums, social media messages or emails promising free content.

2) Check app permissions

Carefully review what access an app requests. If it asks for control over your device, settings or accessibility services unnecessarily, do not install it. Legitimate VPNs rarely require full device control.

3) Use a secure VPN

When choosing a VPN, opt for one with strong privacy policies, transparent ownership and robust encryption. A secure VPN ensures your connection remains private without giving attackers a foothold.

For the best VPN software, see my expert review of the best VPNs for browsing the web privately on your Windows, Mac, Android & iOS devices at Cyberguy.com

4) Install strong antivirus software

A strong antivirus on your device can detect malware and suspicious behavior before damage occurs. These services can scan new downloads and provide ongoing protection.

The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.

Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com

5) Monitor your accounts

Banking Trojans target sensitive credentials. Identity monitoring services can alert you if your personal information appears online or is being misused, helping you respond before harm is done. Identity Theft companies can monitor personal information like your Social Security number (SSN), phone number and email address, and alert you if it is being sold on the dark web or being used to open an account. They can also assist you in freezing your bank and credit card accounts to prevent further unauthorized use by criminals.

See my tips and best picks on how to protect yourself from identity theft at Cyberguy.com

6) Remove the malicious app immediately

If you discover a suspicious app on your Android device, remove it right away.

Settings may vary depending on your Android phone’s manufacturer. 

• Open Settings
• Click Apps and locate the fake app.
• Tap Uninstall to remove it from your device.
• If the uninstall option is unavailable, restart your phone in Safe Mode and try again.
• After removal, run a full antivirus scan to delete any remaining malware components.

7) Keep devices updated

Regular system updates patch security vulnerabilities that malware like Klopatra exploits. Combined with antivirus protection, this significantly reduces the chance of infection.

8) Change passwords and enable 2FA

Once your device is secure, update your login credentials.

• Change passwords for banking, email, and Google accounts immediately. Consider using a password manager to generate and store complex passwords. Check out the best expert-reviewed password managers of 2025 at Cyberguy.com/Passwords
• Turn on two-factor authentication (2FA) for extra protection.
• Use an authenticator app instead of text messages for better security.

This step helps protect your accounts if hackers steal your credentials. 

9) Report the malicious app

Finally, take steps to protect others and report the threat.

• Report the fake app to Google Play Protect or your antivirus provider.
• If your bank details were exposed, contact your bank’s fraud department immediately.
• Reporting helps cybersecurity teams track and block similar fake VPNs in the future.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Kurt’s key takeaway

Fake VPNs and streaming apps exploit your trust and the gaps in app verification processes, showing that even tech-savvy individuals can fall victim. While official stores offer a layer of protection, you must remain vigilant, check permissions and rely on reputable security tools. Never download anything from the random links you see on the internet.

Do you think Google is doing enough to prevent malware from entering the Android OS? Let us know by writing to us at Cyberguy.com

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.

Copyright 2025 CyberGuy.com.  All rights reserved.

An Ohio lawmaker is taking aim at artificial intelligence in a way few expected. Rep. Thaddeus Claggett has introduced House Bill 469, which would make it illegal for AI systems to be treated like people. The proposal would officially label them as “nonsentient entities,” cutting off any path toward legal personhood.

And yes, it also includes a ban on marrying AI.

Claggett, a Republican from Licking County and chair of the House Technology and Innovation Committee, said the measure is meant to keep humans firmly in control of machines. He says that as AI systems begin to act more like humans, the law must draw a clear line between person and program.

TEENS TURNING TO AI FOR LOVE AND COMFORT

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter 

What Ohio’s AI marriage ban would do

Under the proposed legislation, AI systems would not be able to own property, manage bank accounts or serve as company executives. They would not have the same rights or responsibilities as people. The bill also makes any marriage between a human and an AI, or between two AI systems, legally impossible.

Ohio lawmakers consider a bill to ban AI from being recognized as a person. (Cyberguy.com)

Claggett believes the concern is not about robot weddings happening anytime soon. Instead, he wants to prevent AI from taking on the legal powers of a spouse, such as holding power of attorney or making financial and medical decisions for someone else.

The bill also specifies that if an AI causes harm, the human owners or developers would be responsible. That means a person cannot blame their chatbot or automated system for mistakes or damage. Responsibility stays with the humans who built, trained or used the system.

Why Ohio is taking action on AI personhood

The timing of the bill is not random. AI is spreading fast across nearly every industry. Systems now write reports, generate artwork and analyze complex data at lightning speed. Ohio has even started requiring schools to create rules for AI use in classrooms. And major data centers are being built to power AI infrastructure in the state.

At the same time, AI is becoming more personal. A survey by Florida-based marketing firm Fractl found that 22 percent of users said they had formed emotional connections with a chatbot. Three percent even considered one a romantic partner. Another 16 percent said they wondered whether the AI they were talking to was sentient.

That kind of emotional attachment raises red flags for lawmakers. If people start believing AI has feelings or intent, it blurs the boundaries between human experience and digital simulation.

Ohio lawmakers consider a bill to ban AI from being recognized as a person. (iStock)

AI COMPANIONS REPLACE REAL FRIENDS FOR MANY TEENS

The bigger picture: Keeping humans in control

Claggett said the bill is about protecting human agency. He believes that as AI grows smarter and more capable, it must never replace the human decision-maker. 

Claggett told CyberGuy, “We see AI as having tremendous potential as a tool, but also tremendous potential to cause harm. We want to prevent that by establishing guardrails and a legal framework before these developments can outpace regulation and bad actors start exploiting legal loopholes. We want the human to be liable for any misconduct, and for there to be no question regarding the legal status of AI, no matter how sophisticated, in Ohio law.”

The proposed law would also reinforce that AI cannot make choices that affect human lives without oversight.

If passed, it would ensure that no machine can act independently in matters of marriage, property, or corporate leadership. Supporters see the bill as a safeguard for society, arguing that technology should never gain the same legal footing as people.

Critics, however, say the proposal might be a solution to a problem that doesn’t yet exist. They warn that overly broad restrictions could slow down AI research and innovation in Ohio.

Still, even skeptics admit that the conversation is necessary. AI is evolving faster than most laws can keep up, and questions about rights, ownership and accountability are becoming harder to ignore.

What other states are doing about AI personhood

Ohio isn’t alone in pushing back against AI personhood. In Utah, lawmakers passed H.B. 249, the Utah Legal Personhood Amendments, which prohibits courts and government entities from recognizing legal personhood for nonhuman entities, including AI. The law also bars recognizing personhood for entities such as bodies of water, land and plants.

In Missouri, legislators introduced H.B. 1462, the “AI Non-Sentience and Responsibility Act,” which would formally declare AI systems non-sentient and prevent them from acquiring legal status, marriage rights, corporate roles or property ownership.

AI-GENERATED ATTORNEY OUTRAGES JUDGE WHO SCOLDS MAN OVER COURTROOM FAKE: ‘NOT A REAL PERSON’

In Idaho, H.B. 720 (2022) includes language that reserves legal rights and personhood for human beings, effectively barring personhood claims by nonhumans, including AI.

These measures reflect a broader trend among state governments. Many legislators are trying to get ahead of AI’s development by setting clear legal boundaries before the technology becomes more advanced.

Taken together, these proposals show that Ohio’s effort is part of a larger national movement to define where technology ends and legal personhood begins.

House Bill 469 aims to keep humans in control as AI becomes more lifelike. (XPENG)

What this means for you

If you live in Ohio, House Bill 469 could influence how you use and interact with artificial intelligence. It sets clear boundaries that keep AI as a tool rather than a person. By keeping decision-making and responsibility in human hands, the law aims to avoid confusion about who is accountable when technology fails. If an AI system causes harm or makes an error, the responsibility stays with the humans who designed or deployed it.

For Ohio businesses, this proposal could lead to real changes in daily operations. Companies that depend on AI to handle customer support, financial decisions, or creative projects may need to review how much authority those systems have. It may also require stricter policies to ensure that a human is always supervising important decisions involving money, health, or law. Lawmakers want to keep people firmly in charge of choices that affect others.

For everyday users, the message is straightforward. AI can be useful, but it cannot replace human relationships or legal rights. This bill reinforces that no matter how human-like technology appears, it cannot form genuine emotional or legal bonds with people. Conversations with chatbots might feel personal, but they remain simulations created through data and programming.

DETAILS OF TRUMP’S HIGHLY ANTICIPATED AI PLAN REVEALED BY WHITE HOUSE AHEAD OF MAJOR SPEECH

For people outside Ohio, this proposal could point to what is coming next. Other states are closely watching how the bill develops, and some may adopt similar laws. If it passes, it could set a national example for defining the legal limits of artificial intelligence. What happens in Ohio may shape how courts, businesses and individuals across the country decide to manage their connection to AI in the years ahead.

In the end, this debate is not limited to one state. It raises an important question about how society should balance the power of innovation with the need to protect human control.

Take my quiz: How safe is your online security?

Think your devices and data are truly protected? Take this quick quiz to see where your digital habits stand. From passwords to Wi-Fi settings, you’ll get a personalized breakdown of what you’re doing right and what needs improvement. Take my Quiz here: Cyberguy.com 

Kurt’s key takeaways

Ohio’s House Bill 469 is bold, controversial and timely. It challenges us to define the limits of what technology should be allowed to do. Claggett’s proposal is not about stopping innovation. It’s about ensuring that as machines become more capable, humans remain in charge of the choices that shape society. The debate is far from over. Some see this as a necessary safeguard, while others believe it underestimates what AI can contribute. But one thing is certain: Ohio has thrown a spotlight on one of the biggest questions of our time.

CLICK HERE TO GET THE FOX NEWS APP

How far should the law go in deciding what AI can never be? Let us know by writing to us at Cyberguy.com

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter

Copyright 2025 CyberGuy.com.  All rights reserved.  

Election season should be about casting your vote and making your voice heard. But for scammers, it’s an opportunity to trick retirees into handing over personal details, money or even their vote itself.

What many don’t realize is that public voter registration data is one of the biggest tools fraudsters use. With elections coming up on Nov. 4, scammers are already scraping these records and using them to create targeted scams. If you’re a retiree or helping a parent or loved one prepare to vote, here’s how to stay safe.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter 

Why voter records are public and risky

HOW SCAMMERS TARGET YOU EVEN WITHOUT SOCIAL MEDIA

Every state in the U.S. keeps voter registration lists. These include personal details like:

• Full name
• Home address
• Phone number (in some states)
• Political party affiliation
• Voting history (whether you voted, not who you voted for).

Scammers are targeting retirees with fake election messages and calls. (Getty Images)

While these lists are meant for transparency, they’re often made available online or sold in bulk. Data brokers scoop them up, combine them with other records and suddenly scammers have a detailed profile of you: your age, address and voting habits. For retirees, this exposure is especially dangerous. Why? Because seniors are less likely to know that this information is floating around, making scams seem more convincing.

You can easily check where your personal information is exposed with a free data exposure scanner. 

Get a free scan to find out if your personal information is already out on the web: Cyberguy.com

Scams targeting retirees before Nov. 4

Here are the most common election-season cons fraudsters are already running:

1) Fake “polling place” updates

You might get a call, text or email saying your polling location has changed. Scammers may then direct you to a fake site that asks for your Social Security number or ID details “to confirm eligibility.”

2) “Voter ID update” messages

Since some states require voter ID, scammers will pose as election officials, claiming your ID is “out of date” or that you must upload personal documents. These go straight into the wrong hands.

RETIREES LOSE MILLIONS TO FAKE HOLIDAY CHARITIES AS SCAMMERS EXPLOIT SEASONAL GENEROSITY

3) Donation scams

Criminals set up fake political donation sites with names resembling real campaigns. Retirees who are politically active or generous with causes are prime targets here.

4) Absentee ballot phishing

Scammers know many seniors vote by mail. They’ll send emails offering to “help” with requests or track your ballot while stealing your personal data in the process.

Red flags to watch out for

Public voter data can make it easy for fraudsters to create convincing scams. (CyberGuy.com)

Scammers use clever tricks to make their messages seem urgent and official. Here are the warning signs that should make you pause before responding.

• Urgency: “Act now or lose your right to vote.” Scammers use deadlines to scare you.
• Unusual payment requests: No legitimate election office will ever ask for payment to vote or register.
• Strange links: If you’re asked to click on a link from a text or email, stop. Always go directly to your state’s official election website instead.
• Requests for sensitive info: Election officials don’t need your Social Security number or bank account details.

How retirees can stay safe this election season

Protecting yourself doesn’t mean opting out of civic life. It means taking a few smart steps:

1) Reduce your data footprint

This one matters most. The less personal data available about you, the fewer opportunities scammers have to trick you during election season. When they can view your age, address and even your voting history, they can craft messages that sound alarmingly real. The good news is you can take control and limit what’s out there.

Reaching every voter data broker or people-search site on your own is nearly impossible, and most make the process intentionally difficult. That’s why data removal services can help. They automatically send removal requests to hundreds of data-broker sites and keep monitoring to ensure your information doesn’t return. The result is fewer scam calls, fewer phishing emails and far less risk this election season.

While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites.  It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.

REMOVE YOUR DATA TO PROTECT YOUR RETIREMENT FROM SCAMMERS

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com

Get a free scan to find out if your personal information is already out on the web: Cyberguy.com

2) Confirm only through official sources

If you get a message about your polling place, ignore any links and call your local election office directly. Each state also has an official website you can trust.

3) Sign up for ballot tracking

Many states offer secure ballot tracking online. Use only the official election site, not third-party services.

4) Freeze your credit

Since scammers use voter data to impersonate you, a credit freeze stops them from opening new accounts in your name. Retirees who don’t need frequent new credit are especially good candidates for this protection.

Taking steps to remove your personal info online helps keep your vote and data safe. (Kurt “CyberGuy” Knutsson)

5) Be wary of political donation sites

If you want to donate, type the campaign’s official website into your browser instead of clicking a link in an email or social media ad.

Kurt’s key takeaway

Voting is one of the most important rights we have. But this year, scammers will use public voter data to exploit retirees like never before. Don’t let them steal your peace of mind. By spotting the red flags, sticking to official election sources and removing your personal data from the web, you can protect yourself and your vote.

CLICK HERE TO GET THE FOX NEWS APP

Have you or someone you know received a suspicious message about voting or donations? How did you realize or suspect that it was a scam? Let us know by writing to us at Cyberguy.com

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter

Copyright 2025 CyberGuy.com.  All rights reserved.