Israeli security researchers discovered an Android security flaw to bypass active VPN configurations and intercept secure communications. An attacker doesnt need root permissions to eavesdrop data transmissions in stealth way. The vulnerability has been reported to Google, Im curious to see the reply of its security team, in the last week security team at Samsung refused to consider the bug on Knox as a vulnerability. The researchers have tested the vulnerability on several Android devices from various vendors, they also provided a video POC to demonstrate how simple is the traffic eavesdropping.”]
Source: https://securityaffairs.co/wordpress/21384/hacking/vpn-vulnerability-android.html