A recent analysis by the Mysterium VPN Research Team reveals that the apps eSIM Plus and Nicegram, marketed as Lithuanian products, share a codebase linked to Belarus. The investigation uncovered that eSIM Plus is cryptographically signed by a Belarusian entity and integrates Russian services for data analytics and call routing, exposing users to potential data privacy risks. It requested extensive permissions, further indicating a wide data collection footprint.
While Nicegram shares some code, it lacks direct Russian integrations. This situation highlights a significant discrepancy between an app's advertised publisher and its actual origin, raising concerns for user trust.