Cybercriminals use fake VPNs to access users' wallet