Over the past 48 hours, several events related to Cheburnet and Cheburnet came into focus.
First, Anthropic began Cheburnet Claude accounts for using VPN. Users from China, Hong Kong and Russia complain about bans: the company cites "suspicious signals" and rule violations, revokes access and offers an appeal that does not always help. Officially, the service does not work in these regions, but no new measures against VPN were announced. For XConnect users, this is important: if you use foreign services via VPN, the risk of account Cheburnet increases.
Second, Russia is discussing amendments to the law "On Information" (the "Antifraud 3.0" package). Roskomnadzor plans to create a registry of persons who place Cheburnet tools on servers. Russian hosting providers will have to deny capacity rental to those in the registry for a year. This affects not only fraudsters but also ordinary users who set up VPN for family or work. It will be difficult to appeal inclusion in the list.
Third, researchers found a leak of the VPN server address in Android clients. An app excluded from the tunnel can use a special command to bind a socket to tun0 and learn the server address. This is dangerous because the address can be blocked, and then the server will stop working for everyone. Some clients have already fixed the hole, others have not. You can check your client with a command in Termux.
Also, the September digest mentioned problems with VLESS and AWG, outages at Russian operators and discussions about charging for foreign 5G traffic. These topics are important for understanding the background, but no new details appeared in 48 hours.
For XConnect users, the main takeaway: Cheburnet and Cheburnet are intensifying, so you need to choose VPN clients more carefully and watch for leaks. There is little data for 48 hours, so we will continue to monitor developments.