The research, conducted by a team of researchers from the CSIRO, the University of NSW and the University of California, Berkeley, revealed that in some cases free VPN apps allowed malware or "malvertising" as "a deliberate way to monetise the app," by accessing personal information that could be sold to external partners.