Modded APKs often contain trojans or spyware that can steal login credentials, financial data, or monitor device activity.