Android NAT-T keepalive offload bypasses VPN lockdown
Researchers discovered that Android's NAT‑Traversal keepalive offload feature can be exploited to circumvent VPN lockdown mechanisms. By offloading keepalive packets to hardware, the traffic avoids detection by the VPN's security checks, allowing unauthorized network access. The finding highlights a potential vulnerability in Android's handling of VPN connections and may require patches from manufacturers and developers.