Unofficial "unlocked" APKs are often injected with malicious code to steal personal data, banking info, or login credentials from your Android device.