Google warns that several fake VPN apps are actually malware stealing banking details, messages, and sensitive data. Here’s how to stay safe.