A defect in the protocols has been found. The problem could present a privacy threat that is huge.

Based on VPN supplier Perfect Solitude, the defect, dubbed “Port Fail”, changes VPN services supplying port forwarding. The defect leaves open a sufferer’s accurate IP address open for all to see, defeating the goal of a VPN.

To mount an assault, the casualty’s VPN way out IP address must be known by the hacker. To be able to get this, a hacker want to fool users into opening a specially-crafted file. The hacker should have port forwarding enabled but the sufferer does not have to have it activated.

The company stated that all users affect.

The organization found five to be exposed to this attack and examined nine VPN suppliers.

The company said that to be able to mitigate assaults, firewall rules should be implemented by VPN company at the VPN server side to be able to block access from users’ actual IP address to forwarded ports.

Penetration examiner Darren Martyn said in a blog post the defect may be properly used by media businesses to unmask BitTorrent users downloading music or films.

“I consider this type of assault is most likely going to be properly used greatly by copyright-litigation companies attempting to prosecute Torrent users later on, so it’s likely best to double check the VPN provider you’re using doesn’t endure this susceptibility. If they do, notify them, and ensure they repair it,” he said.