Modified APKs are often injected with . Since the app is not vetted by official security standards, it can: Access your contacts, photos, and messages .