The legality of VPN use varies because VPNs can be used to circumvent state-sponsored Internet censorship. In a country like China for example VPN’s are blocked but not necessarily illegal whereas in Russia unrestricted VPNs are outright illegal.
Legitimate criminals, if there is such a thing! Like using VPNs because they can go online incognito. For instance a VPNs can hide a criminals IP address’ while directing a botnet during a DDoS attack. Or even more frequently, VPNs are used to download copyrighted or illegal content undetected by Internet service providers and or law enforcement.
In September 2019 Malwarebytes wrote an article on Fake VPN Site Serves Up Keylogger.
That reported on a suspicious VPN advertised as “the only free VPN that doesn’t keep logs” only to infect the victim with a keylogger, a type of malicious spyware.
For clarification, VPNs encrypt your data and hide your location, identity and activity but offer no protection against viruses, ransomware and other forms of malware, including spyware and keyloggers.
As a result if you’re using a VPN, you still need a cybersecurity program.
We’ve discovered that VPNs create a safer and more private online experience as people can’t figure out who you are, where you are or what you’re looking