And if you're really unlucky, they could be much worse. That's because some particularly malicious VPN apps are basically a Trojan horse for all sorts of nasty malware, adware, or even ransomware.