Unofficial files are frequently modified to include malicious code. This can lead to unauthorized access to personal data, such as contact lists, messages, and login credentials.