Google is warning Android users over fake VPN apps that sneak malware onto phones and tablets.