Modified applications often request extensive device permissions. They can intercept sensitive data, including: Login credentials Personal photos and files