In a new security report, Google is warning users that many VPN apps and extensions are actually malicious software designed to steal your data, not protect it. Here's what you need to know.