A malicious, counterfeit version of a VPN client for mobile devices targets security-minded victims with a RAT.