Google warns of legit VPN apps being used to infect devices with malware | TechRadar

Malicious actors are using popular VPN applications to spread Playfulghost malware, a backdoor with data mining capabilities. They employ SEO poisoning and phishing tactics to trick victims into downloading the malware, which can be executed through infected image files or trojanized VPN apps. Users are advised to download software from reputable sources to avoid infection.